CVE-2026-66659

Publié : 12 août 2026

Modifié : 12 août 2026

Score CVSS

9.3

CRITICAL

Description détaillée

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Références et Patchs

https://patchstack.com/database/wordpress/plugin/tablesome/vulnerability/wordpress-tablesome-plugin-1-2-9-sql-injection-vulnerability?_s_id=cve

Dernières Vulnérabilités

CVE-2026-19426

POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operate the system.

VOIR DÉTAILS

CVE-2025-41771

An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection. The vulnerability affects a SQLite database used only for storing notification messages. Therefore, the impact is limited to the system’s notification functionality.

VOIR DÉTAILS

CVE-2025-41770

An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted.

VOIR DÉTAILS