WP Get The Table

WP Get The Table has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WP Get The Table has a vendor fix available, so running the current release closes it.

All of these findings were reported by Gilang - DJ. WP Get The Table is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Get The Table vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-6387

WP Get The Table <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

Read the full analysis

Vulnerability Records

1 records


2025-07-23 20:40	WP Get The Table <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter WP Get The Table <= 1.5	`CVE-2025-6387`	6.4 Medium	Gilang - DJ	Yes

Showing 1–1 of 1 reports

Latestv1.6.1

WP Get The Table

Author

jonsisk

0.0(0)

0/100

Last Updated

2025-07-25 (1y ago)

Active Installs

20+

Downloads

2,424

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.8.8

Created

2017-01-11 (10y ago)

A plugin that lets you grab an HTML table from a URL by ID or Class, and echo it out onto a page via shortcode. Use your own stylesheets and responsiveness with on-page table elements rather than ugly iframe embeds of offsite data. Arbitrary section

View on WordPress.org