Reflected Cross-site Scripting in TableOn Plugin by PluginUs.Net
CVE-2026-115611

7.1HIGH

Key Information:

Vendor

WordPress
Status
Tableon
Vendor
CVE Published:
29 October 2026

What is CVE-2026-115611?

The TableOn plugin by PluginUs.Net is vulnerable to a Reflected Cross-site Scripting (XSS) flaw. This vulnerability allows attackers to inject malicious scripts into web pages, impacting users who interact with affected pages. Specifically, when input is not properly sanitized during web page generation, an attacker can exploit this to execute arbitrary scripts in the context of the victim’s browser. This threat is applicable to versions of TableOn from n/a to 1.0.7, necessitating prompt updates and security awareness to safeguard web applications.

Affected Version(s)

TableOn 0 <= 1.0.7

References

https://patchstack.com/database/wordpress/plugin/posts-ta...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Oly Hossen | Patchstack Bug Bounty Program
.