Skip to content
OpenAdvisories

Vendor

Essekia

12 known vulnerabilities.

Essekia at a glance

Last 12 months
8
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 3 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 1 vulnerability March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202611
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202610
Feb 202610
Jan 202610
Dec 202530
Nov 202511
Oct 202510
Sep 202510
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Tablesome 5 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 3 Helpie FAQ 2 Tablesome Table Premium 1 Tablesome Table 1
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.3
    CVE-2026-66659

    WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

    Essekia Tablesome Table
  • Medium 6.1
    CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

    bPlugins webfactory unitecms nicheaddons Web / CMS
  • High 8.5
    CVE-2026-27373

    WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3.

    Essekia Tablesome
  • High 8.8
    CVE-2025-12845

    Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation

    The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalation due to a missing capability check on the get_table_data() function in versio…

    Essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent Web / CMS
  • Medium 4.3
    CVE-2026-24524

    WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.2.8.

    Essekia Tablesome
  • Medium 5.0
    CVE-2025-68516

    WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through <= 1.1.35.1.

    Essekia Tablesome
  • Medium 5.4
    CVE-2025-68517

    WordPress Tablesome plugin <= 1.1.35.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.1.

    Essekia Tablesome
  • Medium 4.3
    CVE-2025-66526

    WordPress Tablesome plugin <= 1.1.34 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.34.

    Essekia Tablesome
  • Critical 9.8
    CVE-2025-11499

    Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

    The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, an…

    Essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent Web / CMS
  • High 7.5
    CVE-2025-30944

    WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23.

    Essekia Tablesome Table Premium
  • Medium 5.3
    CVE-2025-58659

    WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

    Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through <= 1.45.

    Essekia Helpie FAQ
  • Medium 5.9
    CVE-2024-47647

    WordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Essekia Helpie FAQ helpie-faq allows Stored XSS.This issue affects Helpie FAQ: from n/a through <= 1.27.

    Essekia Helpie FAQ