Table Field Add-on for ACF and SCF

Table Field Add-on for ACF and SCF has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Table Field Add-on for ACF and SCF has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Table Field Add-on for ACF and SCF is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.0.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Table Field Add-on for ACF and SCF vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-12067

Table Field Add-on for ACF and SCF <= 1.3.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table Cell Content

Read the full analysis

Vulnerability Records

2 records
Table Field Add-on for ACF and SCF banner
Latestv1.4.0

Table Field Add-on for ACF and SCF

Johann Heyne

Author

Johann Heyne

4.9(59)
98/100
Last Updated
2026-08-24 (20d ago)
Active Installs
50,000+
Downloads
1,183,676
Requires WP
5.3+
Requires PHP
7.4+
Tested up to
WP 7.1.0
Created
2014-12-29 (12y ago)

The Table Field plugin is an Add-on and enhances the functionality of the Advanced Custom Fields (ACF) plugin and the Secure Custom Fields plugin with easy-to-edit tables. This plugin requires the Advanced Custom Fields plugin or the Secure Custom Fields plugin! The table field works also with the ACF repeater and flexible field types and supports the ACF Blocks for Gutenberg Features Table Header (Option) Table Caption (Option) Support for ACF Gutenberg blocks Add and remove table columns and rows Change order of columns and rows by dragging To move to the next cells editor press key: tab To move to the previous cells editor press key: shift + tab Translations English – default, always included German: Deutsch – immer dabei! Danish: Dansk – altid der! Polish: Polski – zawsze tam jest! Note: Please contribute your language to the plugin to make it even more useful. PRO There is also a Table Field Pro Add-on for the Advanced Custom Fields and Secure Custom Fields plugins. Setup custom default table Setup minimum and maximum amount of rows and columns Setup style choice for the table and parts of the table Restrict table editing functionalities Configurable optional WordPress editor for cell content editing Table head and foot rows Stub column Rowspan and colspan Improved way for moving rows and columns Disable moving individual columns Support for REST-API Support for WP GraphQL Support for third-party plugins The Pro plugin can run in parallel and you can change an existing field with field type “Table” to the field type “Table Pro” as required. to the plugin website

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C