WordPress plugin
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High2
- Medium13
- Low0
All Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection ≤1.2.12Update to 1.2.13 | CVE-2026-66659 | |
| High8.8 | 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation 0.5.4 – 1.2.1Update to 1.2.2 | CVE-2025-12845 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤1.1.32Update to 1.3.33 | CVE-2025-11499 |
- High7.5Unauthenticated SQL Injection
≤1.2.12Update to 1.2.13
- High8.81.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation
0.5.4 – 1.2.1Update to 1.2.2
- Critical9.8Unauthenticated Arbitrary File Upload
≤1.1.32Update to 1.3.33
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent: common questions
Does Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent: 1 critical, 2 high, 13 medium. At least one is not fixed in the latest version.
How do I check which version of Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent vulnerability?
CVE-2026-66659, published Aug 11, 2026: Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.12 - Unauthenticated SQL Injection. Severity: High (CVSS 7.5).
Is any Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent vulnerability listed in CISA KEV?
No. None of the known Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent vulnerabilities is currently listed in the CISA KEV catalog.