Cross-Site Request Forgery in WP Table Builder by WordPress
CVE-2025-49286

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
WP Table Builder
Vendor
CVE Published:
6 June 2025

What is CVE-2025-49286?

The WP Table Builder has a vulnerability that allows an attacker to exploit Cross-Site Request Forgery (CSRF) conditions. This weakness enables unauthorized commands to be executed on behalf of a user, potentially compromising the integrity of the site. It affects all versions from n/a through 2.0.6, and users of WP Table Builder should take immediate steps to secure their installations.

Affected Version(s)

WP Table Builder <= 2.0.6

References

https://patchstack.com/database/wordpress/plugin/wp-table...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Tran Tuan Dung (domiee13) (Patchstack Alliance)
.