Vulnerabilities

TI-2025-11601 CVE-2025-12649 · GHSA-v29h-3j56-98h5

SortTable Post <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 28

The SortTable Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in the sorttablepost shortcode in all versions up to, and including, 4.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00193 Published 2025-11-27 No fix listed CWE-79

TI-2025-11746 CVE-2025-12823 · GHSA-rcm4-rpjc-6grg

CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The CSV to SortTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csv' shortcode in all versions up to, and including, 4.2 due to insufficient input sanitization and output escaping on user…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00199 Published 2025-11-18 No fix listed CWE-79

Vulnerabilities

Filters

SortTable Post <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

CSV to SortTable <= 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting