PT-2026-65394 · Undefined · Undefined

Kim Dvash · CVE-2026-14924 · Publicado 2026-07-28 · Atualizado 2026-07-28

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.

Exploit

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-14924

Produtos afetados

Undefined

Referências · 2

• 🔥 https://wpscan.com/vulnerability/6cbb9796-5f9b-44b4-b814-176ed225b184 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14924 · Nota de Segurança