What is CVE-2024-3821?

CVE-2024-3821 is a high-severity vulnerability in Wpdatatables – Wordpress Data Table, Dynamic Tables & Table Charts Plugin, classified under Missing Authorization. CVSS score: 7.3/10. Published 2024-06-01.

How severe is CVE-2024-3821?

High severity. CVSS v3 base score is 7.3 out of 10.

Auth bypass in Wpdatatables – Wordpress Data Table, Dynamic Tables & Table Charts Plugin

CVE-2024-3821

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the wdt_ajax_actions.php file in all versions up to, and including, 6.3.2. This makes it possible for unauthenticated attackers to manipulate data tables. Please note this only affects the premium version of the plugin.

Vulnerability class: Broken Access Control

EPSS: 0.003 (24.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Wpdatatables – Wordpress Data Table, Dynamic Tables & Table Charts Plugin — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2024-3821?: CVE-2024-3821 is a high-severity vulnerability in Wpdatatables – Wordpress Data Table, Dynamic Tables & Table Charts Plugin, classified under Missing Authorization. CVSS score: 7.3/10. Published 2024-06-01.
How severe is CVE-2024-3821?: High severity. CVSS v3 base score is 7.3 out of 10.