WordPress plugin
TableOn – WordPress Posts Table Filterable security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium8
- Low0
All TableOn – WordPress Posts Table Filterable vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.7Update to 1.0.8 | CVE-2026-115611 | |
| High7.5 | Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter ≤1.0.5.1Update to 1.0.6 | CVE-2026-18881 | |
| High7.5 | Unauthenticated SQL Injection ≤1.0.5.1Update to 1.0.6 | CVE-2026-42755 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute ≤1.0.4.4Update to 1.0.5 | CVE-2026-3513 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.4.2Update to 1.0.4.3 | CVE-2025-69316 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode ≤1.0.4.1Update to 1.0.4.2 | CVE-2025-5143 | |
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤1.0.5.1Update to 1.0.6 | CVE-2025-60244 | |
| Medium6.1 | Unauthenticated Stored Cross-Site Scripting ≤1.0.3Update to 1.0.4 | CVE-2025-32592 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤1.0.4.3Update to 1.0.4.4 | CVE-2025-32569 | |
| Medium4.3 | Missing Authorization ≤1.0.5.1Update to 1.0.6 | CVE-2025-32218 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.0.1Update to 1.0.1 | — |
- Medium6.1Reflected Cross-Site Scripting
≤1.0.7Update to 1.0.8
- High7.5Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
≤1.0.5.1Update to 1.0.6
- High7.5Unauthenticated SQL Injection
≤1.0.5.1Update to 1.0.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
≤1.0.4.4Update to 1.0.5
- Medium6.1Reflected Cross-Site Scripting
≤1.0.4.2Update to 1.0.4.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
≤1.0.4.1Update to 1.0.4.2
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤1.0.5.1Update to 1.0.6
- Medium6.1Unauthenticated Stored Cross-Site Scripting
≤1.0.3Update to 1.0.4
- Critical9.8Unauthenticated PHP Object Injection
≤1.0.4.3Update to 1.0.4.4
- Medium4.3Missing Authorization
≤1.0.5.1Update to 1.0.6
- Medium6.1Reflected Cross-Site Scripting
<1.0.1Update to 1.0.1
TableOn – WordPress Posts Table Filterable : common questions
Does TableOn – WordPress Posts Table Filterable have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in TableOn – WordPress Posts Table Filterable : 1 critical, 2 high, 8 medium. None are known to affect version null.
How do I check which version of TableOn – WordPress Posts Table Filterable I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent TableOn – WordPress Posts Table Filterable vulnerability?
CVE-2026-115611, published Oct 27, 2026: TableOn – WordPress Posts Table Filterable <= 1.0.7 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any TableOn – WordPress Posts Table Filterable vulnerability listed in CISA KEV?
No. None of the known TableOn – WordPress Posts Table Filterable vulnerabilities is currently listed in the CISA KEV catalog.