CVE-2025-14610Disclosure

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin not restricting which URLs can be fetched when importing CSV data from a URL in the Data Table widget. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations, including localhost and internal network services, and read sensitive files such as wp-config.php via the 'csv_url' parameter.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-01-28); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-28	2	Disclosure1General1
2026-02-02	1	Disclosure1

Full discourse3 posts

CRAC Learning - Tech@cracbot248d
Disclosure
CVE-2025-14610 (CVSS:7.2, HIGH) is Awaiting Analysis. The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, a..https://nvd.nist.gov/vuln/detail/CVE-2025-14610 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE‑2025‑14610 is a Server‑Side Request Forgery vulnerability in TableMaster for Elementor, rated CVSS 7.2 (HIGH), currently awaiting analysis with no known exploitation or patch available.
0000046
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds253d
General
CVE-2025-14610 Server-Side Request Forgery in TableMaster for Elementor WordPress Plugin https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14610
Post summary
The text indicates that CVE-2025-14610 is an SSRF vulnerability in TableMaster for Elementor, but provides no further details on exploits, patches, or active usage.
0000049
4.0K followersView on X
CVE@CVEnew254d
Disclosure
CVE-2025-14610 The TableMaster for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.6. This is due to the plugin… https://www.cve.org/CVERecord?id=CVE-2025-14610
Post summary
The post discloses CVE-2025-14610 as a Server‑Side Request Forgery vulnerability affecting TableMaster for Elementor up to version 1.3.6, with no PoC, exploit, active exploitation, or patch information.
00000198
56.5K followersView on X

Explore more

Back to dashboard