CVE-2026-14924

CVE-2026-14924CVE-2026-14924

Description

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.

Scoring

CVSS 7.5 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Last modified2026-07-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.