CVE-2025-30944CWE-862broken-access-control

CVE-2025-30944

High · published October 22, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

⚡ A missing authorization vulnerability in Essekia Tablesome Table Premium can grant unauthorized access to sensitive functionalities — and that’s a recipe for disaster! 🔥 Think of it like a restaurant where the head chef forgot to put up a sign for the "Employees Only" kitchen area. Anyone could waltz in and start cooking with no oversight! This oversight allows attackers to access and manipulate parts of the application they shouldn’t be able to, potentially leading to unauthorized data exposure or tampering. Imagine someone slipping into the kitchen and changing the menu before the dinner rush — absolute chaos!

Put simply

Think of it like a restaurant where the head chef forgot to put up a sign for the "Employees Only" kitchen area. Anyone could waltz in and start cooking with no oversight! The missing Authorization control in Tablesome Table Premium allows access to functionalities without proper checks, making it easy for users to access features outside their permissions. This vulnerability affects versions up to and including 1.1.23.

What to do

This oversight allows attackers to access and manipulate parts of the application they shouldn’t be able to, potentially leading to unauthorized data exposure or tampering. Imagine someone slipping into the kitchen and changing the menu before the dinner rush — absolute chaos! Immediate action is necessary: update to the latest version of Tablesome Table Premium to close this gap. Additionally, review and reinforce your access control lists (ACLs) to ensure that all functionalities are properly constrained and verify user permissions regularly. You've got this! With a quick update and some reinforcement, you can secure your application and keep those unauthorized kitchen raids at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-22T19:15Z
References (1)
EPSS history
Timeline
  • 22 OCT 14:32Z
    WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability
    cvelistv5