Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:30 p.m.7 views

CVE-2026-24582

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.4AI score0.002EPSS
Exploits0References1
NVD
NVD
added 2026/05/25 10:16 p.m.7 views

CVE-2026-24582

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS0.002EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/25 9:10 p.m.8 views

EUVD-2026-31744

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/25 9:10 p.m.3 views

CVE-2026-24582

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/05/25 9:10 p.m.9 views

CVE-2026-24582 WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/25 9:10 p.m.19 views

CVE-2026-24582 WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS0.002EPSS
Exploits0References1
CVE
CVE
added 2026/05/25 9:10 p.m.15 views

CVE-2026-24582

The CVE-2026-24582 entry concerns the WordPress FlexTable plugin (versions up to and including 3.24.0) with a Broken Access Control/Missing Authorization vulnerability. The issue arises from incorrectly configured access control security levels, potentially enabling unauthorized access to sensiti...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/25 9:9 p.m.11 views

WordPress FlexTable plugin <= 3.24.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin FlexTable versions = 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.8 views

PT-2026-43133

Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FlexTable: from n/a through 3.24.0...

4.3CVSS5.8AI score0.002EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

WordPress plugin FlexTable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

4.3CVSS5.8AI score0.002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/06 6:7 a.m.11 views

CVE-2025-9543

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

3.5CVSS5.4AI score0.00154EPSS
Exploits0References1
NVD
NVD
added 2026/01/05 6:16 a.m.3 views

CVE-2025-9543

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

3.5CVSS0.00154EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/05 6:0 a.m.28 views

CVE-2025-9543 FlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSS

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

0.00154EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/05 6:0 a.m.3 views

EUVD-2026-0836

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

3.5CVSS4.9AI score0.00154EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/05 6:0 a.m.2 views

CVE-2025-9543 FlexTable Google Sheets Connector < 3.19.2 - Admin+ Stored XSS

The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

5AI score0.00154EPSS
Exploits0References1
CVE
CVE
added 2026/01/05 6:0 a.m.13 views

CVE-2025-9543

CVE-2025-9543 (FlexTable – Data Table Sync with Google Sheets): A stored cross-site scripting vulnerability exists in FlexTable WordPress plugin versions before 3.19.2 where unfiltered links imported from Google Sheet cells are not properly sanitized/escaped. This could allow a high-privilege use...

3.5CVSS5AI score0.00154EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/05 12:0 a.m.2 views

PT-2026-1216

Name of the Vulnerable Software and Affected Versions FlexTable WordPress plugin versions prior to 3.19.2 Description The FlexTable WordPress plugin does not properly sanitise and escape imported links from Google Sheet cells. This could allow users with high privileges, such as administrators, t...

3.5CVSS5AI score0.00154EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

WordPress plugin FlexTable 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

3.5CVSS5.8AI score0.00154EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/05/03 1:37 p.m.3 views

WordPress Sheets to WP Table Live Sync plugin <= 3.7.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Manab Jyoti Dowarah Patchstack Alliance in WordPress Plugin FlexTable versions = 3.7.0...

5.9CVSS6.1AI score0.00359EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/04/11 11:16 a.m.2 views

WordPress Sheets to WP Table Live Sync plugin <= 3.5.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin FlexTable versions = 3.5.0...

7AI score0.001EPSS
Exploits0Affected Software1
Rows per page
Query Builder