Vulnerabilities

TI-2025-30636 CVE-2025-48310 · GHSA-rc44-g5c2-4rfm

WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through <= 1.6.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-08-28 No fix listed CWE-352

TI-2024-12700 CVE-2024-13661 · GHSA-5v5f-546h-cjwp

Table Editor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditor_vtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00282 Published 2025-01-30 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Table Editor plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Table Editor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting