CVE-2024-37498 MEDIUM

CVE-2024-37498: WordPress Tablesome plugin <= 1.0.33 - Sensitive Data Exposure via API vulnerability

Vendor Pauple
Product Table & Contact Form 7 Database – Tablesome
Weakness CWE-200 · Info exposure
Published July 10, 2024
Last update April 28, 2026

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pauple Table & Contact Form 7 Database – Tablesome.This issue affects Table & Contact Form 7 Database – Tablesome: from n/a through 1.0.33.

Explanation of Vulnerability in Simple Terms

02Summary

Tablesome versions up to 1.0.33 expose sensitive information that can be accessed over the network without authentication. An attacker can read data that should be restricted, such as database contents or form submissions. The vulnerability requires no special privileges or user interaction. Site administrators should update to a version newer than 1.0.33.

What an attacker can do

03Attacker Capabilities

Read sensitive data from the database or form submissions without logging in.

Potential impact on your site

04Site Impact

Visitor data, form submissions, and database contents may be exposed to unauthorized access.

Conditions required to exploit

05Prerequisites

Network access to the site; no authentication or user interaction required.

Key dates

06Disclosure timeline

July 10, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE