Stored Cross-Site Scripting Vulnerability in TableGen Plugin for WordPress

CVE-2025-10053

What is CVE-2025-10053?

The TableGen – Data Table Generator plugin for WordPress is subject to a Stored Cross-Site Scripting vulnerability due to inadequate input sanitization and output escaping in its admin settings. This allows authenticated attackers with administrator-level permissions to embed arbitrary scripts within pages, which will be executed when users access the affected content. This issue primarily impacts installations with multi-site configurations and where 'unfiltered_html' is disabled, increasing the potential for security breaches.

References