CRITICAL

CVE-2026-66659

Q: What is CVE-2026-66659?

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

Q: Is CVE-2026-66659 actively exploited?

Active exploitation of CVE-2026-66659 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

Q: What is the CVSS score for CVE-2026-66659?

CVE-2026-66659 has a CVSS v3 base score of 9.3 (CRITICAL severity), with vector string 3.1.

WordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability

CVSS v3

9.3

CRITICAL

EPSS Score

—

exploit probability

CISA KEV

known exploited

Exploitation

—

SSVC status

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.

Technical details

CVSS v3 Vector: 3.1
Published: 8/12/2026
Last Modified: 8/12/2026

Frequently asked questions

What is CVE-2026-66659?

Is CVE-2026-66659 actively exploited?

Active exploitation of CVE-2026-66659 has not been confirmed. The EPSS score is N/A%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-66659?

CVE-2026-66659 has a CVSS v3 base score of 9.3 (CRITICAL severity), with vector string 3.1.

Is CVE-2026-66659 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs

Other 2026 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database