CVE-2024-13661

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditorvtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13661

CVE-2024-13661 affects the WordPress plugin Table Editor (WordPress) up to version 1.5.1, enabling Stored Cross‑Site Scripting (Stored XSS) via the shortcode wptableeditor_vtabs due to insufficient input sanitization and output escaping. Exploitation requires authentication at contributor level o...

CVE-2024-13661 Table Editor <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditorvtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress Table Editor plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Table Editor versions = 1.5.1...

PT-2025-2238 · WordPress · Table Editor

Name of the Vulnerable Software and Affected Versions: Table Editor plugin for WordPress versions up to, and including, 1.5.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wptableeditor vtabs' shortcode due to insufficient input sanitization and output escapin...

WordPress plugin Table Editor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress WP-DB-Table-Editor Plugin <= 1.8.4 is vulnerable to Broken Access Control

Software WP-DB-Table-Editor Type Plugin Vulnerable versions = 1.8.4 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2019 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID d6649cd980cb Credits Francesco Carlucci Required...