JoomUnited WP Table Manager vulnerabilities

Latest JoomUnited WP Table Manager CVEs

Newest publication first

1. CVE-2024-13374 WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure

   Published 2025-02-12

   Medium·CVSS 6.5 EPSS 0.31%

   The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptm_getFolders AJAX action in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and abo...

2. CVE-2022-47601 WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control

   Published 2025-01-02

   Medium·CVSS 5.3 EPSS 0.42%

   Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2.

3. CVE-2022-47602 WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-03-29

   Medium·CVSS 5.4 EPSS 0.42%

   Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.