CVE-2026-14924
Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
- State
- Published
- Severity
- 7.5 High
- Published
- Jul 28, 2026
- Updated
- Jul 28, 2026
- Reserved
- Jul 7, 2026
Description
The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | CISA-ADP |
Weaknesses
- CWE-862 Missing Authorization
Affected Products
| Product | Versions |
|---|---|
Tablesome TableUnknown |
|
References
- https://wpscan.com/vulnerability/6cbb9796-5f9b-44b4-b814-176ed225b184/exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.