Skip to content
OpenAdvisories

Vendor

tobiasbg

6 known vulnerabilities.

Products

TablePress – Tables in WordPress made easy 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-12324

    TablePress – Tables in WordPress made easy <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `table` shortcode attributes in all versions up to, and including, 3.2.3 due to insufficient input sanitization and output escapi…

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS
  • Medium 6.4
    CVE-2025-9500

    TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter

    The TablePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shortcode_debug’ parameter in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS
  • Medium 6.4
    CVE-2025-5096

    TablePress <= 3.1.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters

    The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient inpu…

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS
  • Medium 6.4
    CVE-2025-2685

    TablePress – Tables in WordPress made easy <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting

    The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘table-name’ parameter in all versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes …

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS
  • Medium 6.4
    CVE-2024-9595

    TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting

    The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the table cell content in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping. This makes it p…

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS
  • Medium 6.4
    CVE-2024-4354

    TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind

    The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the get_files_to_import() function. This makes it possible for authenticated attackers, with author-…

    tobiasbg TablePress – Tables in WordPress made easy Web / CMS