WP Table Builder – Drag & Drop Table Builder

WP Table Builder – Drag & Drop Table Builder has 13 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 13 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 8 of the records (62%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 13 issues recorded for WP Table Builder – Drag & Drop Table Builder has a vendor fix available, so running the current release closes all known holes.

11 independent researchers contributed these findings, most of them (2) reported by Dmitrii Ignatyev. WP Table Builder – Drag & Drop Table Builder is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

01234567891017.07.2019Today27.09.20216.1WP Table Builder – WordPress Table Plugin <= 1.3.9 - Reflected Cross-Site Scripting CVSS 6.1 · 27.09.202104.03.20226.3Freemius SDK <= 2.4.2 - Missing Authorization Checks CVSS 6.3 · 04.03.202220.02.20234.4WP Table Builder – WordPress Table Plugin <= 1.4.6 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 20.02.202318.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202320.05.20246.4WP Table Builder – WordPress Table Plugin <= 1.4.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 20.05.202402.08.20244.4WP Table Builder <= 1.5.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 02.08.202407.08.20246.4WP Table Builder – WordPress Table Plugin <= 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 07.08.202409.04.20256.1WP Table Builder <= 2.0.5 - Reflected Cross-Site Scripting CVSS 6.1 · 09.04.202505.06.20254.3WP Table Builder <= 2.0.6 - Cross-Site Request Forgery CVSS 4.3 · 05.06.202514.08.20256.4WP Table Builder <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 14.08.20256.4WP Table Builder – WordPress Table Plugin <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVSS 6.4 · 14.08.202508.01.20264.3WP Table Builder <= 2.0.19 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Table Creation CVSS 4.3 · 08.01.202617.08.20264.3WP Table Builder – Drag & Drop Table Builder <= 2.2.0 - Missing Authorization CVSS 4.3 · 17.08.2026

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

13

Get automatic notifications for all WP Table Builder – Drag & Drop Table Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-8604

WP Table Builder – WordPress Table Plugin <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

13 records
2026-08-17 17:12CVE-2026-74006
4.3
Medium
Ananda DhakalYes
2026-01-08 18:58CVE-2025-13753
4.3
Medium
Dmitrii IgnatyevYes
2025-08-14 19:13CVE-2025-8604
6.4
Medium
zaimYes
2025-08-14 00:00CVE-2025-55711
6.4
Medium
theviper17yYes
2025-06-05 00:00CVE-2025-49286
4.3
Medium
domiee13Yes
2025-04-09 00:00CVE-2025-32598
6.1
Medium
Peter ThaleikisYes
2024-08-07 00:00CVE-2024-43125
6.4
Medium
SavPhill (Savphill)Yes
2024-08-02 00:00CVE-2024-3282
4.4
Medium
Dmitrii IgnatyevYes
2024-05-20 21:19CVE-2024-4700
6.4
Medium
Tim CoenYes
2023-07-18 00:00CVE-2023-33999
6.1
Medium
Rafie MuhammadYes
Showing 1–10 of 13 reports
WP Table Builder – Drag & Drop Table Builder banner
Latestv2.2.2

WP Table Builder – Drag & Drop Table Builder

WP Table Builder

Author

WP Table Builder

4.8(681)
96/100
Last Updated
2026-09-01 (11d ago)
Active Installs
50,000+
Downloads
2,347,328
Requires WP
4.9+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2019-07-17 (7y ago)

Plugin Demo | Documentation | Support | Tutorials | Get Pro WP Table Builder is a drag and drop table builder plugin for WordPress. It’s insanely easy to create responsive tables with WP Table Builder. WP Table Builder is perfect for creating comparison tables, pricing tables, list tables and many more. The builder comes with 7 elements right now. You can add the following elements in a table: Text Image List Button Star Rating Custom HTML Shortcode All the elements come with customization options of their own. We have a cell management mode which comes with options like Add New Row, Add New Column, Merge Cells, Split Cells and many more. How to Use After you install the plugin, you will see a Table Builder menu. Go to Table Builder > Add New. You will be able select column number and row number. Once you select that, click on Generate. The table will be generated. You can then drag and drop elements from the left panel into the table cells. Once you are done adding and editing elements, click on Save to save the tables. After the table is saved, you can embed it in post and pages by using a shortcode. Click on &#8216;Embed’ on the top to get the shortcode. You can also get the shortcode from the &#8216;All Tables’ list under &#8216;Table Builder’ menu. Import Tables You can import tables from CSV or XML files. You can import both single and multiple CSV or XML files. Multiple files will have to be zipped. You can also import tables from TablePress plugin. Export Tables Just like importing you can export the tables to CSV or XML files. If you are looking to move tables created with WP Table Builder to another site, XML is the better choice as it will preserve table settings. Join Us To Get Updates and Resources Visit WP Table Builder Website Documentation Support Tutorials WP Table Builder Support Community Follow Us on Twitter Join Our Facebook Group

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C