CVE-2026-24524CWE-862

WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

Medium · published January 23, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
16.8
In the wild
Unconfirmed
What it is

⚠️ A little oversight can lead to big problems! The missing authorization vulnerability in Essekia Tablesome could let someone access data they shouldn't—yikes! Think of this like a restaurant with a hidden backdoor. If the staff forgets to check if a guest has the right reservations, an unauthorized diner could sneak in and enjoy a five-course meal for free! This vulnerability allows unauthorized users to access sensitive data or functions, which could lead to data leaks or unauthorized changes—definitely not a healthy recipe for security! If you’re running a vulnerable version, it’s time to take action before someone fills their plate with your precious data.

Put simply

Think of this like a restaurant with a hidden backdoor. If the staff forgets to check if a guest has the right reservations, an unauthorized diner could sneak in and enjoy a five-course meal for free! This missing authorization flaw in Essekia Tablesome permits access to functionalities without proper security checks. Versions from n/a up to and including 1.2.8 are impacted, making it crucial to tighten access control measures.

What to do

This vulnerability allows unauthorized users to access sensitive data or functions, which could lead to data leaks or unauthorized changes—definitely not a healthy recipe for security! If you’re running a vulnerable version, it’s time to take action before someone fills their plate with your precious data. Update to version 1.2.9 or later to patch this vulnerability. Also, review your access control settings to ensure they’re configured correctly to prevent unauthorized access. Don't skip that security audit! You've got this! By taking these steps, you’ll keep your application safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-01-23T14:28Z
EPSS history
Timeline
  • 23 JAN 14:28Z
    WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability
    cvelistv5