Wpdatatables

14 CVEs across 4 Wpdatatables products. Browse Wpdatatables vulnerabilities, severities, and proof-of-concept exploits.

Wpdatatables products with known CVEs

ProductCVEs
Wpdatatables5
Wpdatatables – Tables & Table Charts4
Wpdatatables – WordPress Data Table, Dynamic Tables & Table Charts Plugin4
Wpdatatables (Premium)1
Wpdatatables CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65509High7.12026-08-06Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
CVE-2026-54825Critical9.32026-06-26Unauthenticated SQL Injection in wpDataTables <= 7.4 versions.
CVE-2026-5721Medium4.72026-04-20The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions…
CVE-2026-28039High7.52026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpDataTables wpDataTables wpdatatables…
CVE-2024-3821High7.32024-06-01The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capabi…
CVE-2024-3820Critical10.02024-06-01The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL Injection via the 'id_key' parameter of…
CVE-2024-4895Medium4.72024-05-23The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CSV imp…
CVE-2024-0591Medium6.12024-03-13The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A'…
CVE-2021-24200Medium6.52021-04-12The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj…
CVE-2021-24199Medium6.52021-04-12The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj…
CVE-2021-24198High8.12021-04-12The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the…
CVE-2021-24197High8.12021-04-12The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the…
CVE-2021-26754Critical9.82021-02-08wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.
CVE-2014-91752014-12-02SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL com…