CVE-2026-14924: Tablesome < 1.1.31 - Unauthenticated Post Creation and Modification
Published Jul 28, 2026
·Updated
The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.
Affected Software
1 affected component
Tablesome Tablesome Table WordPress plugin<1.1.31
Event History
Jul 28, 2026
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-14924?
CVE-2026-14924 has a risk rating of 86, indicating a critical severity level.
2
How do I fix CVE-2026-14924?
To fix CVE-2026-14924, update the Tablesome Table WordPress plugin to version 1.1.31 or later.
3
What types of attacks are possible due to CVE-2026-14924?
CVE-2026-14924 allows unauthenticated users to create new published posts and modify existing posts and pages.
4
Is user authentication necessary to exploit CVE-2026-14924?
No, CVE-2026-14924 can be exploited without any user authentication, allowing unrestricted access.
5
What versions of the Tablesome plugin are affected by CVE-2026-14924?
CVE-2026-14924 affects all versions of the Tablesome Table WordPress plugin prior to 1.1.31.