CVE-2026-65474
MediumCVSS 5.3Summary
The Ninja Tables plugin version 5.2.10 and earlier allows unauthenticated attackers to access sensitive data. The vulnerability is due to a lack of proper data protection against unauthorized reading.
Risk Assessment
The risk involves leakage of confidential information stored in tables, such as personal or financial data, which could compromise user privacy and legal compliance.
Recommendation
It is recommended to update the Ninja Tables plugin to the latest version that fixes the data exposure vulnerability.
Other vulnerabilities in Ninja Tables
See all- CVE-2026-86612Medium
The Ninja Tables WordPress plugin before 5.2.17 does not restrict shortcode expansion to administrator-authored table rows which, in a non-default configuration, allows unauthenticated users to have arbitrary shortcodes executed on a public page, and to permanently break that page, by submitting an ordinary form entry.
- CVE-2026-61964High
Unauthenticated Cross Site Scripting (XSS) in Ninja Tables versions up to and including 5.2.9.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS