Sheets to WP Table Live Sync – WordPress Table Plugin with Google Sheets Integration, CVE-2025-9543
- CVE, Research URL
- Home page URL
- Application
-
Sheets to WP Table Live Sync – WordPress Table Plugin with Google Sheets Integration
- Published on
- Jan 05, 2026
- Research Description
- The FlexTable WordPress plugin before 3.19.2 does not sanitise and escape the imported links from Google Sheet cells, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
- Affected versions
-
max 3.19.2.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Email Inquiry & Cart Options for WooCommerce (CVE-2026-24526) , Jan 27, 2026 |