Essekia

Products

ProductCVEsExploitedLatest
Tablesome5–Mar 5, 2026
Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent3–May 1, 2026
Helpie FAQ2–Sep 22, 2025
Tablesome Table1–Aug 12, 2026
Tablesome Table Premium1–Oct 22, 2025

Exploited and recent CVEs

  • CVE-2026-66659 Critical 9.3 WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability 0.4%
  • CVE-2024-13362 Medium 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
  • CVE-2026-27373 High 8.5 WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability 0.3%
  • CVE-2025-12845 High 8.8 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation 0.4%
  • CVE-2026-24524 Medium 4.3 WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68517 Medium 5.4 WordPress Tablesome plugin <= 1.1.35.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68516 Medium 5.0 WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-66526 Medium 4.3 WordPress Tablesome plugin <= 1.1.34 - Broken Access Control vulnerability 0.2%
  • CVE-2025-11499 Critical 9.8 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload 1.1%
  • CVE-2025-30944 High 7.5 WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-58659 Medium 5.3 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2024-47647 Medium 5.9 WordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability 0.3%