An unauthenticated remote code execution or content manipulation vulnerability in the Tablesome Table WordPress plugin poses a severe risk to site integrity.

This is a Missing Authorization (CWE-862) flaw where the plugin lacks authentication, capability, and nonce checks on specific AJAX actions. An unauthenticated attacker can leverage this to create new published posts or overwrite existing pages on the target WordPress site.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk. Successful exploitation allows unauthorized individuals to modify website content, which can be used to inject malicious scripts, deface the site, or perform phishing attacks, leading to significant reputational damage and potential loss of user trust.

Immediate Action: Update the Tablesome Table WordPress plugin to version 1.1.31 or later immediately.

Proactive Monitoring: Review web server access logs for unusual POST requests directed at plugin-specific AJAX endpoints.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized requests to the plugin's AJAX interface.

Public Exploit Available: No

Given the ease of exploitation and the potential for full content control, immediate remediation is required. Administrators must prioritize the update to version 1.1.31 to eliminate this authorization bypass and secure the site against unauthorized content manipulation.