TablePress – Tables in WordPress made easy

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   TablePress – Tables in WordPress made easy

Information

Software Type Plugin
Software Slug tablepress (view on wordpress.org)
Software Status Active
Software Author tobiasbg
Software Website tablepress.org
Software Downloads 17,838,681
Software Active Installs 700,000
Software Record Last Updated January 8, 2025

7 Vulnerabilities

Submit a Vulnerability
TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
6.4
CVE-2024-9595
Oct 11, 2024
Researcher: Max Boll (_b0lli)
PHPSpreadsheet Library < 2.3.0 - XXE Injection
7.5
CVE-2024-45293
Oct 7, 2024
Researchers:
TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
6.4
CVE-2024-4354
Jun 6, 2024
Researcher: Tobias Weißhaar (kun_19)
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files
8.5
CVE-2024-23825
Jan 31, 2024
Researcher: isacaya
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
TablePress <= 1.14 - Authenticated (Author+) CSV Injection
8.0
CVE-2019-20180
Feb 1, 2020
Researcher: 0xPablito
TablePress <= 1.8 - XML External Entity Injection
4.3
CVE-2017-10889
Jul 4, 2017
Researcher: Yuji Tounai
Title Status CVE ID CVSS Researchers Date
TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting Patched CVE-2024-9595 6.4 Max Boll (_b0lli) October 11, 2024
PHPSpreadsheet Library < 2.3.0 - XXE Injection Patched CVE-2024-45293 7.5 October 7, 2024
TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind Patched CVE-2024-4354 6.4 Tobias Weißhaar (kun_19) June 6, 2024
TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files Patched CVE-2024-23825 8.5 isacaya January 31, 2024
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Patched CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023
TablePress <= 1.14 - Authenticated (Author+) CSV Injection Patched CVE-2019-20180 8.0 0xPablito February 1, 2020
TablePress <= 1.8 - XML External Entity Injection Patched CVE-2017-10889 4.3 Yuji Tounai July 4, 2017

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation