What is the CVSS score of CVE-2025-30944?

CVE-2025-30944 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.0%.

Tablesome Table Premium CVE-2025-30944

Q: Which versions of Tablesome Table Premium are affected by CVE-2025-30944?

High integrity impact vulnerability in WordPress Tablesome Table Premium plugin versions <= 1.1.23 allows unauthenticated attackers to modify plugin functionality due to missing authorization checks.

HIGH

Missing Authorization (CWE-862)

2025-10-22 audit@patchstack.com

WordPress Authentication Bypass Wordpress Plugin

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

vuln.today AI

7.5 HIGH

No privileges required, no user interaction, network vector; high integrity impact as attackers can alter functionality.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 18:46 vuln.today

CVE Published

Oct 22, 2025 - 15:15 cve.org

HIGH 7.5

DescriptionCVE.org

Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Tablesome Table Premium: from n/a through <= 1.1.23.

AnalysisAI

High integrity impact vulnerability in WordPress Tablesome Table Premium plugin versions <= 1.1.23 allows unauthenticated attackers to modify plugin functionality due to missing authorization checks. An attacker can access features not properly constrained by ACLs, potentially altering table configurations or data. No active exploitation or public exploit code is reported, but the flaw is remotely exploitable with low complexity.

Technical ContextAI

The vulnerability stems from a missing authorization check (CWE-862) in the plugin’s access control mechanism, where certain functionality is not properly restricted by Access Control Lists (ACLs). The affected product is the premium version of the Tablesome Table plugin for WordPress, with CPE likely cpe:2.3:a:essekia:tablesome_table_premium:*:*:*:*:*:wordpress:*:*. The root cause is insufficient validation of user capabilities when accessing sensitive actions, allowing unauthorized users to invoke functions that should require higher privileges.

Affected ProductsAI

Tablesome Table Premium for WordPress versions from n/a through 1.1.23 are affected. The patchstack advisory (https://patchstack.com/database/Wordpress/Plugin/tablesome-premium/vulnerability/wordpress-tablesome-table-premium-1-1-23-broken-access-control-vulnerability?_s_id=cve) details the issue.

RemediationAI

Update to the latest version of Tablesome Table Premium. The Patchstack advisory likely indicates a fixed version of 1.1.24 or later; if no update is available, consider disabling the plugin until a patch is provided. As a temporary workaround, restrict access to the WordPress admin area and review any unauthorized changes to table content. Note that disabling the plugin may affect site functionality relying on it.