CVE-2026-2306: Techjewel Ninja Tables – Easy Data Table Builder

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the `createFluentCartTable` function in all versions up to, and including, 5.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary Ninja Tables in the database which can lead to database pollution and resource exhaustion.

Affected products

• Techjewel Ninja Tables – Easy Data Table Builder: up to and including 5.2.6

Published 2026-05-06. Last modified 2026-06-17.