TableOn – WordPress Posts Table Filterable 

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   TableOn – WordPress Posts Table Filterable 

Information

Software Type Plugin
Software Slug posts-table-filterable (view on wordpress.org)
Software Status Active
Software Author realmag777
Software Website posts-table.com
Software Downloads 9,849
Software Active Installs 200
Software Record Last Updated August 17, 2026

10 Vulnerabilities

Submit a Vulnerability
TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter
7.5
CVE-2026-18881
Aug 4, 2026
Researchers: Athiwat Tiprasaharn (Jitlada), Itthidej Aramsri (Boeing777), Waris Damkham
TableOn – WordPress Posts Table Filterable  <= 1.0.5.1 - Unauthenticated SQL Injection
7.5
CVE-2026-42755
May 30, 2026
Researcher: hhhai
TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute
6.4
CVE-2026-3513
Apr 7, 2026
Researcher: Itthidej Aramsri (Boeing777)
TableOn <= 1.0.4.2 - Reflected Cross-Site Scripting
6.1
CVE-2025-69316
Jan 20, 2026
Researcher: Skalucy
TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode
6.4
CVE-2025-5143
Jun 20, 2025
Researcher: Peter Thaleikis
TableOn <= 1.0.5.1 - Unauthenticated Arbitrary Shortcode Execution
6.5
CVE-2025-60244
May 22, 2025
Researcher: ch4r0n
TableOn – WordPress Posts Table Filterable <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2025-32592
Apr 14, 2025
Researcher: Abdi Pranata
TableOn – WordPress Posts Table Filterable <= 1.0.4.3 - Unauthenticated PHP Object Injection
9.8
CVE-2025-32569
Apr 10, 2025
Researcher: LVT-tholv2k
TableOn – WordPress Posts Table Filterable <= 1.0.5.1 - Missing Authorization
4.3
CVE-2025-32218
Apr 4, 2025
Researcher: Abdi Pranata
TableOn – WordPress Posts Table Filterable <= 1.0.0 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Oct 18, 2021
Researcher: WPScanTeam
Title Status CVE ID CVSS Researchers Date
TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' Filter Parameter Patched CVE-2026-18881 7.5 Athiwat Tiprasaharn (Jitlada), Itthidej Aramsri (Boeing777), Waris Damkham August 4, 2026
TableOn – WordPress Posts Table Filterable  <= 1.0.5.1 - Unauthenticated SQL Injection Patched CVE-2026-42755 7.5 hhhai May 30, 2026
TableOn – WordPress Posts Table Filterable <= 1.0.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute Patched CVE-2026-3513 6.4 Itthidej Aramsri (Boeing777) April 7, 2026
TableOn <= 1.0.4.2 - Reflected Cross-Site Scripting Patched CVE-2025-69316 6.1 Skalucy January 20, 2026
TableOn – WordPress Posts Table Filterable <= 1.0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via tableon_popup_iframe_button Shortcode Patched CVE-2025-5143 6.4 Peter Thaleikis June 20, 2025
TableOn <= 1.0.5.1 - Unauthenticated Arbitrary Shortcode Execution Patched CVE-2025-60244 6.5 ch4r0n May 22, 2025
TableOn – WordPress Posts Table Filterable <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-32592 6.1 Abdi Pranata April 14, 2025
TableOn – WordPress Posts Table Filterable <= 1.0.4.3 - Unauthenticated PHP Object Injection Patched CVE-2025-32569 9.8 LVT-tholv2k April 10, 2025
TableOn – WordPress Posts Table Filterable <= 1.0.5.1 - Missing Authorization Patched CVE-2025-32218 4.3 Abdi Pranata April 4, 2025
TableOn – WordPress Posts Table Filterable <= 1.0.0 - Reflected Cross-Site Scripting Patched 6.1 WPScanTeam October 18, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation