CVE-2026-14924

Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification

High · published July 28, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00440 · 37.2th percentile
Published
2026-07-28T06:00Z
EPSS history
Timeline
  • 28 JUL 06:00Z
    Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
    cvelistv5