27 matches found
CVE-2025-5143
The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableonpopupiframebutton shortcode in all versions up to, and including, 1.0.4.1 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-5143 TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tableonpopupiframebutton shortcode in all versions up to, and including, 1.0.4.1 due to insufficient input sanitization and output escaping on user supplied attributes...
WordPress TableOn plugin <= 1.0.4.4 - Content Injection vulnerability
Content Injection vulnerability discovered by ch4r0n in WordPress Plugin TableOn versions = 1.0.4.4...
CVE-2025-32592
CVE-2025-32592 : RealMag777 TableOn – WordPress Posts Table Filterable is affected by a Stored XSS due to Improper input neutralization during web page generation . Affected versions: up to 1.0.3 (inclusive). Impact is modeling as stored XSS on pages using the plugin; the vulnerability allows arb...
CVE-2025-32592 WordPress TableOn Plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Stored XSS.This issue affects TableOn: from n/a through = 1.0.3...