CVE-2025-12845

Name of the Vulnerable Software and Affected Versions Tablesome Table – Contact Form DB plugin for WordPress versions 0.5.4 through 1.2.1

Description The Tablesome Table – Contact Form DB plugin for WordPress has a flaw where a missing capability check in the get table data() function allows authenticated users with Subscriber-level access or higher to retrieve plugin data, including email logs. This unauthorized access can be used to escalate privileges and potentially trigger a password reset to obtain the reset key.

Recommendations Versions 0.5.4 through 1.2.1 should be updated to a version with a capability check implemented in the get table data() function.