PT-2026-23250 · Unknown · Essekia Tablesome

Daroo · Published 2026-03-05 · Updated 2026-03-05 · CVE-2026-27373

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Name of the Vulnerable Software and Affected Versions Essekia Tablesome versions through 1.2.3

Description Essekia Tablesome contains a flaw related to the improper neutralization of special elements within SQL commands, leading to a potential SQL Injection issue. This allows for Blind SQL Injection. The issue affects the application's interaction with SQL databases, potentially allowing an attacker to manipulate database queries. The SQL commands are not properly sanitized, which allows for the injection of malicious code.

Recommendations Versions prior to 1.2.3 should be updated.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2026-27373

Affected Products

Essekia Tablesome

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-27373 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/tablesome/vulnerability/wordpress-tablesome-plugin-1-2-3-sql-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2029654781015241162 · Twitter Post
• https://twitter.com/infoflowcloud/status/2029655965864235463 · Twitter Post