Advisories · Technology

realmag777 TableOn – WordPress Posts Table Filterable.

Every CVE that names realmag777 TableOn – WordPress Posts Table Filterable among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18881 CVE record

CVSS 7.5 High

TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
- realmag777 TableOn – WordPress Posts Table Filterable
- SQL injection
Not analysed yet 5 Aug 2026
CVE-2026-3513 CVE record

CVSS 6.4 Medium

TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
- realmag777 TableOn – WordPress Posts Table Filterable
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2025-5143 CVE record

CVSS 6.4 Medium

TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
- realmag777 TableOn – WordPress Posts Table Filterable
- Cross-site scripting (XSS)
Not analysed yet 21 Jun 2025