CVE-2017-10889

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.

Date published : 2017-11-17

TablePress – Tables in WordPress made easy

https://jvn.jp/en/jp/JVN05398317/index.html