Wpdatatables
11 CVEs across 4 Wpdatatables products. Browse Wpdatatables vulnerabilities, severities, and proof-of-concept exploits.
Wpdatatables products with known CVEs
Wpdatatables CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-65509 | High | 7.1 | 2026-08-06 | Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions. |
CVE-2026-54825 | Critical | 9.3 | 2026-06-26 | Unauthenticated SQL Injection in wpDataTables <= 7.4 versions. |
CVE-2026-5721 | Medium | 4.7 | 2026-04-20 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions… |
CVE-2026-28039 | High | 7.5 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpDataTables wpDataTables wpdatatables… |
CVE-2024-3821 | High | 7.3 | 2024-06-01 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capabi… |
CVE-2024-3820 | Critical | 10.0 | 2024-06-01 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL Injection via the 'id_key' parameter of… |
CVE-2024-4895 | Medium | 4.7 | 2024-05-23 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CSV imp… |
CVE-2024-0591 | Medium | 6.1 | 2024-03-13 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A'… |
CVE-2021-24200 | Medium | 6.5 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj… |
CVE-2021-24199 | Medium | 6.5 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj… |
CVE-2021-24198 | High | 8.1 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the… |
CVE-2021-24197 | High | 8.1 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the… |
CVE-2021-26754 | Critical | 9.8 | 2021-02-08 | wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection. |
CVE-2014-9175 | | | 2014-12-02 | SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL com… |