WordPress Tablesome Plugin SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in the WordPress Tablesome plugin, affecting versions through 1.2.3. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability could allow attackers to interact with the database in an unauthorized manner, such as extracting or altering information.

Remediation

Users are advised to update to a version of the Tablesome plugin that is later than 1.2.3. For those using Patchstack, a mitigation rule has been issued to block attacks until an official patch can be applied.