CVE-2026-65474 MEDIUM

CVE-2026-65474: WordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability

Vendor Wpmanageninja
Product Ninja Tables
Weakness CWE-497
Published July 23, 2026
Last update July 23, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Unauthenticated Sensitive Data Exposure in Ninja Tables <= 5.2.10 versions.

Explanation of Vulnerability in Simple Terms

02Summary

Ninja Tables versions up to 5.2.10 expose sensitive information through improper access controls. An unauthenticated attacker can read data that should be restricted, such as table contents or configuration details. The vulnerability requires no user interaction and can be exploited over the network. Update to a version newer than 5.2.10 to resolve this issue.

What an attacker can do

03Attacker Capabilities

Read sensitive data from tables or plugin configuration without authentication.

Potential impact on your site

04Site Impact

Confidential table data and plugin settings may be exposed to the public internet.

Conditions required to exploit

05Prerequisites

Network access only; no authentication or user interaction required.

Key dates

06Disclosure timeline

July 23, 2026 CVE published

Related vulnerabilities

08Related CVE

CVE-2026-24377 WordPress Nexter Blocks plugin <= 4.6.3 - Sensitive Data Exposure vulnerability CVE-2025-62143 WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability CVE-2025-62083 WordPress BoomDevs WordPress Coming Soon plugin plugin <= 1.0.4 - Sensitive Data Exposure vulnerability CVE-2026-39469 WordPress PageLayer plugin <= 2.0.8 - Sensitive Data Exposure vulnerability CVE-2026-57753 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.1.5 - Sensitive Data Exposure vulnerability