Tablepress Security Vulnerabilities and Issues — Tablepress CVE List

Lucene search

TablepressTablepress

3 matches found

CVE•added 2020/01/09 9:15 p.m.•119 views

CVE-2019-20180

The TablePress plugin 1.9.2 for WordPress allows tablepress[data] CSV injection by Editor users. Note: The vendor disputes this issue and argues that this responsibility lies with the application that opens the CSV file and not TablePress.

6.8CVSS6.8AI score0.03288EPSS

CVE•added 2024/06/07 6:15 a.m.•43 views

CVE-2024-4354

The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the get_files_to_import() function. This makes it possible for authenticated attackers, with author-level access and above, to make web requ...

6.4CVSS6.4AI score0.00616EPSS

CVE•added 2025/05/23 9:15 a.m.•41 views

CVE-2025-5096

The TablePress plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the 'data-caption', 'data-s-content-padding', 'data-s-title', and 'data-footer' data-attributes in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This...

6.4CVSS5.7AI score0.0008EPSS