Plugin security history

TablePress – Tables in WordPress made easy Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 13 vulnerability records associated with TablePress – Tables in WordPress made easy, published between 2017 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

13Total records

0Critical

3High

10Medium

0Low

0Informational

13Patched records

0Currently marked unpatched

2017-07-04First disclosure

2026-06-25Latest disclosure

13 of 13CVE coverage

Use this history

Check and watch TablePress – Tables in WordPress made easy.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Check my installed version Watch TablePress – Tables in WordPress made easy

Year-by-Year Timeline

Year	Records	Relative volume
2017	1	1 records
2020	1	1 records
2023	1	1 records
2024	4	4 records
2025	4	4 records
2026	2	2 records

Severity Breakdown

Severity	Records	Share
High	3	23.1%
Medium	10	76.9%

Vulnerability-Type Breakdown

Cross-Site Scripting

8 records61.5%

First: 2023. Latest: 2026.

Other

5 records38.5%

First: 2017. Latest: 2024.

Patch Status

Patched: 13
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

3.3.2
3.0.3
3.2.5
3.2.1
3.1.3
3.1
2.4.3
2.3.2
2.2.5
2.1.5
2.0
1.8.1

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-3.3.1`	TablePress – Tables in WordPress made easy <= 3.3.1 - Reflected Cross-Site Scripting	June 25, 2026	3.3.2	Medium
`*-3.0.2`	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter	April 30, 2026	3.0.3	Medium
`*-3.2.4`	TablePress – Tables in WordPress made easy <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes	November 3, 2025	3.2.5	Medium
`*-3.2`	TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter	August 29, 2025	3.2.1	Medium
`*-3.1.2`	TablePress <= 3.1.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters	May 22, 2025	3.1.3	Medium
`*-3.0.4`	TablePress – Tables in WordPress made easy <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting	March 26, 2025	3.1	Medium
`*-2.4.2`	TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting	October 11, 2024	2.4.3	Medium
`*-2.4.2`	PHPSpreadsheet Library < 2.3.0 - XXE Injection	October 7, 2024	2.4.3	High
`*-2.3.1`	TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind	June 6, 2024	2.3.2	Medium
`*-2.2.4`	TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files	January 31, 2024	2.2.5	High
`2.0-2.1.4`	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get	July 18, 2023	2.1.5	Medium
`*-1.14`	TablePress <= 1.14 - Authenticated (Author+) CSV Injection	February 1, 2020	2.0	High
`*-1.8`	TablePress <= 1.8 - XML External Entity Injection	July 4, 2017	1.8.1	Medium

Selected source records

Latest Records

MediumCVE-2026-56051

TablePress – Tables in WordPress made easy <= 3.3.1 - Reflected Cross-Site Scripting

Published: June 25, 2026

Affected versions: *-3.3.1
Patched versions: 3.3.2

Original Wordfence record

MediumCVE-2024-13362

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Published: April 30, 2026

Affected versions: *-3.4.12
Patched versions: 3.4.15

Affected versions: *-2.2.2
Patched versions: 2.2.5

Affected versions: *-3.0.5
Patched versions: 3.0.7

Affected versions: *-2.3.1
Patched versions: 2.3.2

Affected versions: *-2.0.2
Patched versions: 2.0.3

Affected versions: *-1.3.4
Patched versions: Not supplied

Affected versions: *-1.2.7
Patched versions: 1.2.8

Affected versions: *-1.3.1
Patched versions: 1.3.5

Affected versions: *-2.9.2
Patched versions: 2.10.0

Affected versions: *-2.6.7
Patched versions: 2.7.0

Affected versions: *-4.6.8
Patched versions: 4.7.6

Affected versions: *-1.9.2
Patched versions: 1.9.3

Affected versions: *-1.6.22
Patched versions: 1.6.23

Affected versions: *-1.4.2
Patched versions: 1.4.3

Affected versions: *-2.1
Patched versions: 2.2

Affected versions: *-2.6.5
Patched versions: 2.6.7

Affected versions: *-2.2.27
Patched versions: 2.5.1

Affected versions: *-3.2.6
Patched versions: 3.2.8

Affected versions: *-5.17.2
Patched versions: 5.19.0

Affected versions: *-1.1.16
Patched versions: 1.1.17

Affected versions: *-2.5.8
Patched versions: 2.6.1

Affected versions: *-1.1.3
Patched versions: 1.1.10

Affected versions: *-2.5.5
Patched versions: 2.5.6

Affected versions: *-4.2.0
Patched versions: 4.2.1

Affected versions: *-3.0.2
Patched versions: 3.0.3

Affected versions: *-1.5.5
Patched versions: 1.6

Affected versions: *-1.2.56
Patched versions: 1.2.57

Affected versions: *-3.2.4
Patched versions: 3.2.5

Affected versions: *-2.4.1
Patched versions: 2.4.4

Affected versions: *-1.4.0
Patched versions: 1.4.1

Affected versions: *-1.6.3
Patched versions: 1.6.4

Affected versions: *-1.5.140
Patched versions: 1.5.141

Affected versions: *-2.6.0
Patched versions: 2.6.1

Affected versions: *-2.3.4
Patched versions: 2.3.5

Affected versions: *-2.5.7
Patched versions: 2.5.9

Affected versions: *-3.2.6
Patched versions: 3.2.9

Affected versions: *-1.7
Patched versions: Not supplied

Affected versions: *-2.1.6
Patched versions: 2.2.0

Affected versions: *-1.5.10
Patched versions: 1.6.2

Affected versions: *-2.0.7.2
Patched versions: 2.0.7.3

Affected versions: *-2.4.27
Patched versions: 2.4.29

Affected versions: *-3.12.1
Patched versions: 3.13.1

Affected versions: *-6.0.2
Patched versions: Not supplied

Affected versions: *-5.222
Patched versions: 5.225

Affected versions: *-1.1.5
Patched versions: 1.1.6

Affected versions: *-1.9.0
Patched versions: 1.10.0

Affected versions: *-1.4.7
Patched versions: Not supplied

Affected versions: *-1.4.9
Patched versions: 1.5.0

Affected versions: *-3.5.1
Patched versions: 3.5.2

Affected versions: *-2.16.3.3
Patched versions: 2.16.3.6

Affected versions: *-1.7.2
Patched versions: 1.8.5

Affected versions: *-5.0.57
Patched versions: 5.1.8

Affected versions: *-1.8.99
Patched versions: 2.3.17

Affected versions: *-3.0.0
Patched versions: 3.1.0

Affected versions: *-3.4.9
Patched versions: 3.4.11

Affected versions: *-2.1.34
Patched versions: 2.1.35

Affected versions: *-1.1.13
Patched versions: 1.1.17

Affected versions: *-1.7
Patched versions: Not supplied

Affected versions: *-5.5.8
Patched versions: 5.5.9

Affected versions: *-1.9.4
Patched versions: 1.9.7

Affected versions: *-1.10.4
Patched versions: 1.10.5.1

Affected versions: *-6.1.13
Patched versions: 6.1.14

Affected versions: *-2.9.7
Patched versions: 2.10.0

Affected versions: *-2.2.38
Patched versions: 2.2.39

Affected versions: *-3.12
Patched versions: 3.13

Affected versions: *-2.2.0
Patched versions: 2.3.1

Affected versions: *-2.3.7
Patched versions: 2.3.12

Affected versions: *-3.2.8
Patched versions: 3.2.9

Affected versions: *-2.3.0
Patched versions: 2.3.1

Affected versions: *-2.6.0
Patched versions: 2.10.0

Affected versions: *-2.07
Patched versions: 2.08

Affected versions: *-6.6.5
Patched versions: 6.6.6

Affected versions: *-3.9.6
Patched versions: 3.9.7

Affected versions: *-2.0.82
Patched versions: 2.0.83

Affected versions: *-3.3.2
Patched versions: 3.3.4

Affected versions: *-3.2.7
Patched versions: 3.2.9

Affected versions: *-3.2.4.4
Patched versions: 3.2.4.5

Affected versions: *-2.1.0
Patched versions: 2.2.0

Affected versions: *-1.7.0
Patched versions: 1.7.1

Affected versions: *-1.7.0
Patched versions: 1.7.1

Affected versions: *-2.5.9
Patched versions: 2.5.17

Affected versions: *-2.8.6
Patched versions: 2.8.7

Affected versions: *-1.6.3.2
Patched versions: 1.6.3.3

Affected versions: *-7.3.3
Patched versions: 7.3.4

Affected versions: *-1.0.40
Patched versions: 1.0.41

Affected versions: *-1.10.6
Patched versions: 1.10.8

Affected versions: *-2.4.2
Patched versions: 2.4.4

Affected versions: *-3.3.0
Patched versions: 3.3.2

Affected versions: *-3.3.7
Patched versions: 3.3.8

Affected versions: *-2.25.16
Patched versions: 2.25.19

Affected versions: *-2.0.0
Patched versions: 2.0.1

Affected versions: *-1.13.15
Patched versions: 1.13.16

Affected versions: *-1.6.0
Patched versions: 1.6.1

Affected versions: *-3.0.6
Patched versions: 3.0.7

Affected versions: *-3.2.2
Patched versions: 3.2.3

Affected versions: *-1.5.8
Patched versions: Not supplied

Affected versions: *-5.3.4
Patched versions: 5.4.0

Affected versions: *-3.8.3
Patched versions: 3.8.4

Affected versions: *-1.2.7
Patched versions: 1.2.9

Affected versions: *-2.7.33
Patched versions: 2.7.34

Affected versions: *-5.5.31
Patched versions: 5.5.32

Affected versions: *-2.5.9
Patched versions: 2.6.0

Affected versions: *-2.4.1
Patched versions: 2.4.3

Affected versions: *-4.4.1
Patched versions: 4.4.2

Affected versions: *-1.8.5
Patched versions: 1.9

Affected versions: *-1.16.3
Patched versions: 1.16.4

Affected versions: *-1.3.3
Patched versions: 1.3.4

Affected versions: *-2.3.11
Patched versions: Not supplied

Affected versions: *-1.8.4.8.1
Patched versions: 1.8.4.9.1

Affected versions: *-3.1.28
Patched versions: 3.2.2

Affected versions: *-8.0.7
Patched versions: 8.0.8

Affected versions: *-2.1.5
Patched versions: Not supplied

Affected versions: *-1.6.0
Patched versions: 1.6.5

Affected versions: *-1.9.8
Patched versions: 2.0.19

Affected versions: *-1.2.6
Patched versions: Not supplied

Affected versions: *-4.5.0
Patched versions: 4.5.1

Affected versions: *-1.0.4
Patched versions: 1.1

Affected versions: *-1.7.34
Patched versions: 1.8.12

Affected versions: *-6.1.10
Patched versions: 6.1.11

Affected versions: *-2.8.4
Patched versions: Not supplied

Affected versions: *-3.1.26
Patched versions: 3.1.28

Affected versions: *-3.12.0
Patched versions: 3.16.0

Affected versions: *-2.24.6
Patched versions: 2.25.2

Affected versions: *-7.7.0
Patched versions: 7.7.3

Affected versions: *-2.7.0
Patched versions: 2.7.7

Affected versions: *-3.7.3
Patched versions: Not supplied

Affected versions: *-3.2.7
Patched versions: 3.2.9

Affected versions: *-1.6.3
Patched versions: 1.6.6

Affected versions: *-1.9.0
Patched versions: 1.21.0

Affected versions: *-1.6.6
Patched versions: 1.7.5

Affected versions: *-1.5.8
Patched versions: 1.6.1

Original Wordfence record

MediumCVE-2025-12324

TablePress – Tables in WordPress made easy <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Published: November 3, 2025

Affected versions: *-3.2.4
Patched versions: 3.2.5

Original Wordfence record

MediumCVE-2025-9500

TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter

Published: August 29, 2025

Affected versions: *-3.2
Patched versions: 3.2.1

Original Wordfence record

MediumCVE-2025-5096

TablePress <= 3.1.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters

Published: May 22, 2025

Affected versions: *-3.1.2
Patched versions: 3.1.3

Original Wordfence record

MediumCVE-2025-2685

TablePress – Tables in WordPress made easy <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting

Published: March 26, 2025

Affected versions: *-3.0.4
Patched versions: 3.1

Original Wordfence record

MediumCVE-2024-9595

TablePress <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting

Published: October 11, 2024

Affected versions: *-2.4.2
Patched versions: 2.4.3

Original Wordfence record

HighCVE-2024-45293

PHPSpreadsheet Library < 2.3.0 - XXE Injection

Published: October 7, 2024

Affected versions: *-1.8
Patched versions: 2.1

Affected versions: *-3.6.0
Patched versions: 4.0.1

Affected versions: *-5.9
Patched versions: 6.0

Affected versions: *-3.11.6
Patched versions: 3.11.7

Affected versions: *-2.4.2
Patched versions: 2.4.3

Affected versions: *-4.3
Patched versions: 4.4

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-4.6
Patched versions: 4.7

Affected versions: *-1.5
Patched versions: 1.6

Original Wordfence record

Highest-Severity Records

HighCVE-2024-23825

TablePress <= 2.2.4 - Authenticated(Author+) Server Side Request Forgery(SSRF) via _get_import_files

Published: January 31, 2024

Affected versions: *-2.2.4
Patched versions: 2.2.5

Original Wordfence record

HighCVE-2019-20180

TablePress <= 1.14 - Authenticated (Author+) CSV Injection

Published: February 1, 2020

Affected versions: *-1.14
Patched versions: 2.0

Original Wordfence record

HighCVE-2024-45293

PHPSpreadsheet Library < 2.3.0 - XXE Injection

Published: October 7, 2024

Affected versions: *-1.8
Patched versions: 2.1

Affected versions: *-3.6.0
Patched versions: 4.0.1

Affected versions: *-5.9
Patched versions: 6.0

Affected versions: *-3.11.6
Patched versions: 3.11.7

Affected versions: *-2.4.2
Patched versions: 2.4.3

Affected versions: *-4.3
Patched versions: 4.4

Affected versions: *-2.0.5
Patched versions: Not supplied

Affected versions: *-4.6
Patched versions: 4.7

Affected versions: *-1.5
Patched versions: 1.6

Original Wordfence record

MediumCVE-2025-9500

TablePress <= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode_debug Parameter

Published: August 29, 2025

Affected versions: *-3.2
Patched versions: 3.2.1

Original Wordfence record

MediumCVE-2025-12324

TablePress – Tables in WordPress made easy <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

Published: November 3, 2025

Affected versions: *-3.2.4
Patched versions: 3.2.5

Original Wordfence record

MediumCVE-2024-4354

TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind

Published: June 6, 2024

Affected versions: *-2.3.1
Patched versions: 2.3.2

Original Wordfence record

MediumCVE-2025-5096

TablePress <= 3.1.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Multiple Parameters

Published: May 22, 2025

Affected versions: *-3.1.2
Patched versions: 3.1.3

Original Wordfence record

MediumCVE-2025-2685

TablePress – Tables in WordPress made easy <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting

Published: March 26, 2025

Affected versions: *-3.0.4
Patched versions: 3.1

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory