Vulnerabilities in WPDataTables
12 resultsVexday analysis
WPDataTables apresenta footprint mínimo de vulnerabilidades com 1 CVE crítica catalogada, atualmente sem sinais de exploração ativa em campo. A fraqueza dominante é injeção SQL (CWE-89), risco significativo em plugins WordPress que processam entrada de usuários; não há indicação de descoberta recente, sugerindo vulnerabilidade histórica já mitigada ou em versão legada.
CVE-2021-24198—wpDataTables < 3.4.2 - Improper Access Control leading to Table Data DeletionEPSS 1.5%CVE-2021-24199—wpDataTables < 3.4.2 - Blind SQL Injection via start ParameterEPSS 1.3%CVE-2021-24200—wpDataTables < 3.4.2 - Blind SQL Injection via length ParameterEPSS 1.3%CVE-2021-24197—wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission TakeoverEPSS 1.2%CVE-2024-3820CRITICALwpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL InjectionEPSS 0.7%CVE-2024-0591MEDIUMwpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.EPSS 0.6%CVE-2024-4895MEDIUMwpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV ImportEPSS 0.4%CVE-2026-54825CRITICALWordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-28039HIGHWordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2024-3821HIGHwpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & ModificationEPSS 0.3%CVE-2026-5721MEDIUMwpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data ImportEPSS 0.3%CVE-2026-65509HIGHWordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%