Essekia vulnerabilities

Products

• Tablesome 5
• Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 4
• Helpie FAQ 2
• Helpie FAQ — Accordion, Docs & Knowledge Base 1
• Tablesome Table 1
• Tablesome Table Premium 1

Latest Essekia CVEs

Newest publication first

1. CVE-2026-66659 WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

   Published 2026-08-12

   Critical·CVSS 9.3 EPSS 0.40%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

2. CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

   Published 2026-05-01

   Medium·CVSS 6.1 EPSS 0.28%

   Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

3. CVE-2026-27373 WordPress Tablesome plugin <= 1.2.3 - SQL Injection vulnerability

   Published 2026-03-05

   High·CVSS 8.5 EPSS 0.30%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue affects Tablesome: from n/a through <= 1.2.3.

4. CVE-2025-12845 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation

   Published 2026-02-19

   High·CVSS 8.8 EPSS 0.40%

   The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalation due to a missing capability check on the get_table_data() function in versions 0.5.4 to 1.2.1. Th...

5. CVE-2026-24524 WordPress Tablesome plugin <= 1.2.8 - Broken Access Control vulnerability

   Published 2026-01-23

   Medium·CVSS 4.3 EPSS 0.26%

   Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.2.8.

6. CVE-2025-68517 WordPress Tablesome plugin <= 1.1.35.1 - Broken Access Control vulnerability

   Published 2025-12-24

   Medium·CVSS 5.4 EPSS 0.21%

   Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.35.1.

7. CVE-2025-68516 WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerability

   Published 2025-12-24

   Medium·CVSS 5.0 EPSS 0.21%

   Insertion of Sensitive Information Into Sent Data vulnerability in Essekia Tablesome tablesome allows Retrieve Embedded Sensitive Data.This issue affects Tablesome: from n/a through <= 1.1.35.1.

8. CVE-2025-66526 WordPress Tablesome plugin <= 1.1.34 - Broken Access Control vulnerability

   Published 2025-12-09

   Medium·CVSS 4.3 EPSS 0.24%

   Missing Authorization vulnerability in Essekia Tablesome tablesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tablesome: from n/a through <= 1.1.34.

9. CVE-2025-11499 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload

   Published 2025-11-01

   Critical·CVSS 9.8 EPSS 1.1%

   The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, and including, 1.1.32....

10. CVE-2025-30944 WordPress Tablesome Table Premium <= 1.1.23 - Broken Access Control Vulnerability

    Published 2025-10-22

    High·CVSS 7.5 EPSS 0.40%

    Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23.

11. CVE-2025-58659 WordPress Helpie FAQ plugin <= 1.45 - Sensitive Data Exposure vulnerability

    Published 2025-09-22

    Medium·CVSS 5.3 EPSS 0.29%

    Use of Hard-coded Credentials vulnerability in Essekia Helpie FAQ helpie-faq allows Retrieve Embedded Sensitive Data.This issue affects Helpie FAQ: from n/a through <= 1.45.

12. CVE-2022-4974 Freemius SDK <= 2.4.2 - Missing Authorization Checks

    Published 2024-10-16

    Medium·CVSS 6.3 EPSS 0.44%

    The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in...

13. CVE-2024-47647 WordPress FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability

    Published 2024-10-05

    Medium·CVSS 5.9 EPSS 0.27%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Essekia Helpie FAQ helpie-faq allows Stored XSS.This issue affects Helpie FAQ: from n/a through <= 1.27.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.