wptableeditor vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.1%	CVE-2025-48310Table Editor (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-08-28CVE Database V5CVE-2025-48310 Cross-Site Request Forgery (CSRF) vulnerability in wptableeditor Table Editor wp-table-editor allows Cross Site Request Forgery.This issue affects Table Editor: from n/a through <= 1.6.4. EPSS 0.1%Vulnerability wptableeditor CWE-352	CVE Database V5	2025-08-28
Medium	6.4	EPSS 0.3%	CVE-2024-13661Table Editor (WordPress plugin) · Cross-site Scripting Medium6.4EPSS 0.3%2025-01-30CVE Database V5CVE-2024-13661 The Table Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wptableeditor_vtabs' shortcode in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability wptableeditor CWE-79	CVE Database V5	2025-01-30

Page 1 of 1