WordPress Tablesome Table 0.5.4-1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation vulnerability

🗓️ 19 Feb 2026 07:16:48Reported by kr0dType

Missing authorization exposes data and enables privilege escalation in WordPress Tablesome versions 0.5.4 to 1.2.1.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-12845	19 Feb 202620:21	–	circl
CNNVD	WordPress plugin Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 安全漏洞	19 Feb 202600:00	–	cnnvd
CVE	CVE-2025-12845	19 Feb 202603:25	–	cve
Cvelist	CVE-2025-12845 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation	19 Feb 202603:25	–	cvelist
NVD	CVE-2025-12845	19 Feb 202607:17	–	nvd
Positive Technologies	PT-2026-20587	19 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-12845	20 Feb 202607:22	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-12845	19 Feb 202600:00	–	vulncheck_kev
Vulnrichment	CVE-2025-12845 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation	19 Feb 202603:25	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (February 16, 2026 to February 22, 2026)	26 Feb 202616:02	–	wordfence

Vulners

Node

wordpress tablesomeRange≤0.5.4-1.2.1

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/tablesome/tablesome-table-contact-form-db-wpforms-cf7-gravity-forminator-fluent-054-121-missing-authorization-to-authenticated-subscriber-information-exposure-and-privilege-escalation

19 Feb 2026 07:16Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.18.8

EPSS0.0007

SSVC