We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2026-14924

CVE-2026-14924

WordPress

Severity: HIGH
CVSS: 7.5CVSS
Published: 2026-07-28
Last modified: 2026-07-28
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE: CWE-862

Description

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.

References

https://wpscan.com/vulnerability/6cbb9796-5f9b-44b4-b814-176ed225b184/

Summary

Description

References