Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 TableOn posts-table-filterable allows Blind SQL…

A SQL injection vulnerability (CVE-2026-42755) has been identified in the RealMag777 TableOn WordPress plugin. The vulnerability allows for blind SQL injection attacks through improper neutralization of special elements used in SQL commands. The issue affects TableOn plugin versions up to and including 1.0.5.1. This vulnerability enables attackers to execute malicious SQL queries against the database, potentially leading to unauthorized data access or manipulation. The plugin's posts-table-filterable component is specifically affected by this security flaw.