Essekia güvenlik açıkları (CVE)

9.3Kritik

CVE-2026-66659 2 ay önce

WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

Essekia Tablesome Table

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

6.1Orta

CVE-2024-13362 6 ay önce

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

sebet Go Fetch Jobs (for WP Job Manager); 5starplugins Dynamic Copyright Year; peterschulznl Code Manager; bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

8.5Yüksek

CVE-2026-27373 8 ay önce

WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability

Essekia Tablesome

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3.

8.8Yüksek

CVE-2025-12845 8 ay önce

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation

essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalation due to a missing capability check on the get_table_data() function in versio…

4.3Orta

CVE-2026-24524 9 ay önce

WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

Essekia Tablesome

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.2.8.

5.4Orta

CVE-2025-68517 10 ay önce

WordPress Tablesome plugin <= 1.1.35.1 - Broken Access Control vulnerability

Essekia Tablesome

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.1.

5.0Orta

CVE-2025-68516 10 ay önce

WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability

Essekia Tablesome

Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through <= 1.1.35.1.

4.3Orta

CVE-2025-66526 11 ay önce

WordPress Tablesome plugin <= 1.1.34 - Broken Access Control vulnerability

Essekia Tablesome

Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.34.

9.8Kritik

CVE-2025-11499 1 yıl önce

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

essekia Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, an…

1.1%EPSS

7.5Yüksek

CVE-2025-30944 1 yıl önce

WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability

Essekia Tablesome Table Premium

Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23.

5.3Orta

CVE-2025-58659 1 yıl önce

WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

Essekia Helpie FAQ

Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through <= 1.45.

5.9Orta

CVE-2024-47647 2 yıl önce

WordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability

Essekia Helpie FAQ

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Essekia Helpie FAQ helpie-faq allows Stored XSS.This issue affects Helpie FAQ: from n/a through <= 1.27.