Known vulnerabilities in WP Table Builder – Drag & Drop Table Builder

Drag and drop table builder for WordPress. Create responsive comparison tables, pricing tables, and data tables. No coding needed.

12Reported vulnerabilities

7.1Highest CVSS score

2.2.0Latest version

50,000+Active installs

What to do now

Update WP Table Builder – Drag & Drop Table Builder to 2.1.14 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 27, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-3282	Medium 4.8	0.3%	Before 1.5.0	`1.5.0`	August 23, 2024
CVE-2026-6922	High 7.1	0.6%	0 to 2.2.1 (inclusive)	`2.1.14`	September 22, 2026
CVE-2025-8604	Medium 6.4	0.3%	0 to 2.0.12 (inclusive)	`2.0.13`	August 15, 2025
CVE-2024-43125	Medium 6.5	0.3%	Before 1.5.0	`1.5.0`	August 12, 2024
CVE-2025-55711	Medium 6.4	0.2%	2.0.12 and earlier	`2.0.13`	August 14, 2025
CVE-2025-32598	Medium 6.1	0.4%	2.0.5 and earlier	`2.0.6`	April 9, 2025
WF-cb4681a5-d722-4585-97d3-370938c079a2	Medium 6.1	—	1.3.9 and earlier	`1.3.10`	September 27, 2021
CVE-2024-4700	Medium 5.4	0.3%	Before 1.4.15	`1.4.15`	May 21, 2024
CVE-2022-46852	Medium 4.4	0.4%	1.4.6 and earlier	`1.4.7`	February 20, 2023
CVE-2026-74006	Medium 4.3	0.3%	2.2.0 and earlier	`2.2.1`	August 17, 2026
CVE-2025-13753	Medium 4.3	0.3%	0 to 2.0.19 (inclusive)	`2.0.20`	January 9, 2026
CVE-2025-49286	Medium 4.3	0.2%	2.0.6 and earlier	`2.0.7`	June 5, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.