{"id":82616,"date":"2026-07-28T09:30:02","date_gmt":"2026-07-28T06:00:02","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2026-14924-tablesome-1-1-31-unauthenticated-post-creation-and-modification\/"},"modified":"2026-07-28T09:30:02","modified_gmt":"2026-07-28T06:00:02","slug":"cve-2026-14924-tablesome-1-1-31-unauthenticated-post-creation-and-modification","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2026-14924-tablesome-1-1-31-unauthenticated-post-creation-and-modification\/","title":{"rendered":"CVE-2026-14924 &#8211; Tablesome &lt; 1.1.31 &#8211; Unauthenticated Post Creation and Modification"},"content":{"rendered":"<p>CVE ID :CVE-2026-14924<\/p>\n<p>  Published : July 28, 2026, 6 a.m. | 1\u00a0hour, 25\u00a0minutes ago<\/p>\n<p>  Description :The Tablesome Table  WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages.<\/p>\n<p>  Severity: 0.0 | NA<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2026-14924 Published : July 28, 2026, 6 a.m. | 1\u00a0hour, 25\u00a0minutes ago Description :The Tablesome Table WordPress plugin before 1.1.31 does not perform any authentication, capability, or nonce checks in one of its AJAX actions, allowing unauthenticated users to create new published posts and to overwrite arbitrary existing posts and pages. Severity: 0.0 &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-82616","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=82616"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/82616\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=82616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=82616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=82616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}