Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent vulnerabilities

2 known vulnerabilities in Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent from Essekia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Tablesome Table – Contact Form DB – WPForms…: Missing Authorization

  CVE-2025-12845Feb 19, 2026Essekia

  The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to unauthorized access of data that leads to privilege escalation due to a missing capability check on the get_table_data() function in version

• 9.8 Critical severity

  Tablesome Table – Contact Form DB – WPForms…: Unrestricted Upload of File with Dangerous Type

  CVE-2025-11499Nov 1, 2025EssekiaEPSS 1.07%

  The Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image_from_external_url() function in all versions up to, and