WordPress plugin
WP Table Builder – Drag & Drop Table Builder security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium14
- Low0
All WP Table Builder – Drag & Drop Table Builder vulnerabilities
- Medium5.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'
≤2.1.7Update to 2.1.8
- High7.12.1.13 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'ids' Parameter
2.1.1 – 2.1.13Update to 2.1.14
- Medium4.3Missing Authorization
≤2.2.0Update to 2.2.1
- Medium4.3Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation
≤2.0.19Update to 2.0.20
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤2.0.12Update to 2.0.13
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.0.12Update to 2.0.13
- Medium4.3Cross-Site Request Forgery
≤2.0.6Update to 2.0.7
- Medium6.1Reflected Cross-Site Scripting
≤2.0.5Update to 2.0.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.4.15Update to 1.5.0
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤1.5.0Update to 1.5.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.4.14Update to 1.4.15
- Medium6.1Reflected Cross-Site Scripting via fs_request_get
≤1.9.2No patch available
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤1.4.6Update to 1.4.7
- Medium6.3Missing Authorization Checks
all versionsNo patch available
- Medium6.1Reflected Cross-Site Scripting
≤1.3.9Update to 1.3.10
WP Table Builder – Drag & Drop Table Builder: common questions
Does WP Table Builder – Drag & Drop Table Builder have known vulnerabilities?
Yes. VulnCrest Radar lists 15 known vulnerabilities in WP Table Builder – Drag & Drop Table Builder: 1 high, 14 medium. At least one is not fixed in the latest version.
How do I check which version of WP Table Builder – Drag & Drop Table Builder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Table Builder – Drag & Drop Table Builder vulnerability?
CVE-2026-2982, published Nov 11, 2026: WP Table Builder – Drag & Drop Table Builder <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'url'. Severity: Medium (CVSS 5.4).
Is any WP Table Builder – Drag & Drop Table Builder vulnerability listed in CISA KEV?
No. None of the known WP Table Builder – Drag & Drop Table Builder vulnerabilities is currently listed in the CISA KEV catalog.