CVE Catalog
CVE-2026-66659
CriticalCVSS 9.3Summary
The Tablesome Table plugin for WordPress (versions up to 1.2.9) is vulnerable to blind SQL injection. An attacker can exploit improper neutralization of special elements in SQL commands.
Risk Assessment
An attacker can gain unauthorized access to the database, steal or modify data, posing a serious threat to data confidentiality and integrity.
Recommendation
Update the Tablesome Table plugin to a version newer than 1.2.9 if a patch is available, or apply other mitigations such as a web application firewall.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.