Lucene search
+L

65 matches found

CVE
CVE
added 6 hours ago7 views

CVE-2026-18881

CVE-2026-18881 affects the TableOn WordPress Posts Table Filterable plugin for WordPress, up to version 1.0.5.1. The vulnerability is a blind SQL injection in the public AJAX action tableon_get_table_data, triggered by the parameter filter_data[comment_count]. The value is split on ":" and interp...

7.5CVSS5.8AI score
SaveExploits0References5
EUVD
EUVD
added 6 hours ago4 views

EUVD-2026-53181

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the filterdatacommentcount parameter of the public tableongettabledata AJAX action in all versions up to, and including, 1.0.5.1. This is due to insufficient escaping on the user-supplied...

7.5CVSS5.8AI score
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:37 p.m.11 views

CVE-2026-3513

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableonbutton' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes...

6.4CVSS5.7AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/06/05 7:16 p.m.10 views

CVE-2026-42755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS5.6AI score0.00236EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/05/30 5:45 a.m.16 views

WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by hhhai in WordPress Plugin TableOn versions = 1.0.5.1...

9.3CVSS5.9AI score0.00236EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/05/27 11:16 a.m.19 views

CVE-2026-42755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS0.00236EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/27 9:49 a.m.13 views

CVE-2026-42755 WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/27 9:49 a.m.24 views

CVE-2026-42755

CVE-2026-42755 affects the WordPress RealMag777 TableOn plugin, specifically the posts-table-filterable component, with versions up to and including 1.0.5.1. The issue is an improper neutralization of special elements used in SQL commands, resulting in a Blind SQL Injection vulnerability. The CVS...

9.3CVSS5.8AI score0.00236EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/27 9:49 a.m.39 views

CVE-2026-42755 WordPress TableOn plugin <= 1.0.5.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS0.00236EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/27 9:49 a.m.9 views

CVE-2026-42755

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS5.8AI score0.00236EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/27 9:49 a.m.15 views

EUVD-2026-32203

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS5.8AI score0.00236EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.19 views

WordPress plugin TableOn SQL注入漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.3CVSS5.9AI score0.00236EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.22 views

PT-2026-43663

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL Injection.This issue affects TableOn: from n/a through = 1.0.5.1...

9.3CVSS5.8AI score0.00236EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/08 6:31 a.m.6 views

EUVD-2026-20040

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableonbutton' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes...

6.4CVSS6.1AI score0.00264EPSS
SaveExploits0References7
NVD
NVD
added 2026/04/08 5:16 a.m.12 views

CVE-2026-3513

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableonbutton' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes...

6.4CVSS0.00264EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/04/08 3:36 a.m.23 views

CVE-2026-3513 TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableonbutton' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes...

6.4CVSS0.00264EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/04/08 3:36 a.m.7 views

CVE-2026-3513 TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute

The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableonbutton' shortcode in all versions up to and including 1.0.4.4. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes...

6.4CVSS6.1AI score0.00264EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/08 3:36 a.m.21 views

CVE-2026-3513

CVE-2026-3513 concerns the TableOn – WordPress Posts Table Filterable plugin (

6.4CVSS6.1AI score0.00264EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.11 views

WordPress plugin TableOn – WordPress Posts Table Filterable 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.4CVSS5.8AI score0.00264EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.13 views

PT-2026-31075

Name of the Vulnerable Software and Affected Versions TableOn – WordPress Posts Table Filterable plugin versions up to and including 1.0.4.4 Description The TableOn – WordPress Posts Table Filterable plugin is susceptible to Stored Cross-Site Scripting. This is due to insufficient input...

6.4CVSS5.9AI score0.00264EPSS
SaveExploits0References11
Rows per page
Query Builder