CVE-2026-61964: WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.

Affected Software

1 affected component

wordpress/Ninja Tables<=5.2.9

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Ninja Tables Plugin to a version that resolves this vulnerability.
Fixed in 5.2.10

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-61964 has a severity rating of 7.1, classified as high.

To fix CVE-2026-61964, upgrade to Ninja Tables plugin version 5.3.0 or later.

CVE-2026-61964 is categorized as an unauthenticated Cross Site Scripting (XSS) vulnerability.

Ninja Tables versions up to and including 5.2.9 are affected by CVE-2026-61964.

Yes, CVE-2026-61964 can be exploited without requiring authentication.