TableOn (N/a - 1.0.7) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/tableon-n/a---1.0.7/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 13:20:31 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgPluginUs.Net TableOn: Reflected Cross-Site Scripting (CVE-2026-115611)https://feed.craftedsignal.io/briefs/2026-10-tableon-xss/Thu, 29 Oct 2026 13:20:31 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-tableon-xss/The PluginUs.Net TableOn WordPress plugin contains an improper neutralization of input vulnerability leading to Reflected Cross-site Scripting.<p>The PluginUs.Net TableOn posts-table-filterable plugin is affected by a vulnerability involving improper neutralization of input during web page generation. This allows for Reflected Cross-site Scripting (XSS). This issue affects all versions of TableOn from n/a through 1.0.7.</p> mediumadvisory