Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

79 Quality Score

Active Installs

17/30

With 8,000 active installs this is a niche utility rather than a household plugin, so it scores mid-range on popularity despite strong engagement among its existing users.

Update Freshness

25/25

A recent update on May 5, 2026 and testing against WordPress 6.9.4 indicate the developer is actively shipping fixes and keeping pace with core releases.

User Rating

14/15

A 96 out of 100 average from 87 reviewers reflects genuine user satisfaction, with no obvious pattern of complaints dragging the score down.

Support Health

8/15

Zero public support threads resolved is a real concern, so buyers who rely on community or developer responsiveness should factor in direct contact expectations.

WP Compatibility

15/15

It requires WordPress 6.7 or newer and PHP 7.0 or above, and confirms full compatibility with WordPress 6.9.4, which is a healthy baseline.

Scores higher than 73% of indexed plugins

About

Powerful Table, Form & Mail Automations. Form Entry Management (+ frontend table ), integrate with MailChimp, G Sheets, CF7, WPForms, Elementor, etc.

Active Installs 7k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-11 11:57am GMT

Requires WordPress 6.7+

Tested Up To 6.9.7

Requires PHP 7.0+

Security History

16 known vulnerabilities, all patched

1 Critical 2 High 13 Medium

Most recent: August 11, 2026

View details ▸

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.9 - Unauthenticated SQL Injection High

August 11, 2026 Patched in [] CVE-2026-66659

Tablesome <= 1.1.30 - Missing Authorization Medium

July 7, 2026 Patched in ["1.1.31"] CVE-2026-14924

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Medium

April 30, 2026 Patched in ["1.1.17"] CVE-2024-13362

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.3 - Authenticated (Subscriber+) SQL Injection Medium

February 24, 2026 Patched in ["1.2.4"] CVE-2026-27373

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation High

February 18, 2026 Patched in ["1.2.2"] CVE-2025-12845

Tablesome <= 1.2.8 - Missing Authorization Medium

January 26, 2026 Patched in ["1.2.9"] CVE-2026-24524

Tablesome <= 1.1.35.1 - Authenticated (Subscriber+) Information Exposure Medium

December 22, 2025 Patched in ["1.1.35.2"] CVE-2025-68516

Tablesome <= 1.1.35.1 - Missing Authorization Medium

December 22, 2025 Patched in ["1.1.35.2"] CVE-2025-68517

Tablesome <= 1.1.34 - Missing Authorization Medium

December 5, 2025 Patched in ["1.1.35.1"] CVE-2025-66526

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload Critical

October 31, 2025 Patched in ["1.3.33"] CVE-2025-11499

Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure Medium

July 4, 2024 Patched in ["1.0.34"] CVE-2024-37498

Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery Medium

April 10, 2024 Patched in ["1.0.26"] CVE-2024-31388

Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting Medium

March 16, 2024 Patched in ["1.0.28"] CVE-2024-29110

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Medium

July 18, 2023 Patched in ["1.0.15"] CVE-2023-33999

Tablesome <= 1.0.8 - Reflected Cross-Site Scripting Medium

April 19, 2023 Patched in ["1.0.9"] CVE-2023-1890

Freemius SDK <= 2.4.2 - Missing Authorization Checks Medium

March 4, 2022 Patched in ["0.6.7"] CVE-2022-4974

What It Does

Tablesome Table captures form submissions from major WordPress form builders, including Contact Form 7, WPForms, Gravity Forms, Forminator, and Fluent Forms, then stores entries in a customisable front-end table on your site. Beyond simple storage, it pushes entries to MailChimp, Google Sheets, and other destinations, and can trigger conditional email notifications and redirects on submission.

Who It's For

This plugin suits agencies, sales teams, and small businesses that handle large volumes of mixed form submissions and need a unified front-end dashboard, spreadsheet-style export, or automation into email marketing platforms. It is also a fit for help desks, event organisers, and real estate or SaaS sites that rely on form data for daily operations.

Who Should Skip It

If you only need to capture entries from one form on a low-traffic site, a free add-on from your form builder already covers it. Sites requiring dedicated support tickets or those on PHP versions older than 7.0 should look elsewhere given the lack of public support threads.

The Bottom Line

Tablesome is a focused form-to-table and form-automation tool that punches above its modest install count thanks to excellent ratings, recent maintenance, and broad form builder compatibility. The lack of any resolved public support threads is a meaningful caveat, so treat it as a low-risk purchase for automation-savvy users but a slower-support option for novices. Score it a 79.38 out of 100 and you have a solid, specialised plugin worth trying on form-heavy sites.

Related Plugins

All in One SEO 98/100

Pick this when your priority is search engine optimisation rather than form entry management, since it solves an entirely different problem.

WP Mail SMTP by WPForms 97/100

Choose this when reliable email deliverability is the missing piece, which is a more common pain point than form-to-table workflows.

TablePress 95/100

Pick TablePress when you mainly need to publish static, styled tables on pages and posts and do not require form-to-database automation.

Post SMTP 91/100

Choose Post SMTP when transactional email logging and a backup SMTP relay matter more than aggregating form submissions.

Redirection 89/100

Pick Redirection when your main need is managing 301 redirects and 404 monitoring rather than capturing and routing form data.