Stored Cross-Site Scripting Vulnerability in TableGen Plugin for WordPress
CVE-2025-10053
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 3 October 2025
What is CVE-2025-10053?
The TableGen β Data Table Generator plugin for WordPress is subject to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping in its admin settings. This allows authenticated attackers with administrator-level permissions to embed arbitrary scripts within pages, which will be executed when users access the affected content. This issue primarily impacts installations with multi-site configurations and where 'unfiltered_html' is disabled, increasing the potential for security breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
TableGen β Data Table Generator * <= 1.3.1
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved