Read the docs

TMS

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

TMS records in CISA KEV

No TMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Amelia 12 records MEDIUM Wpdatatables 8 records HIGH Wpdatatables Lite 3 records LOW

Records

8 records in Wpdatatables · all components

TI-2023-03986 CVE-2023-4314 · GHSA-j3w9-3jjx-5qp2

wpDataTables < 2.1.66 - Admin+ PHP Object Injection

Priority HIGH 67

The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01594 Published 2023-09-11 Fixed in 2.1.66
TI-2021-06492 CVE-2021-24200 · GHSA-cv9q-2p8x-2xxf

wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter

Priority LOW 32

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89
TI-2021-06491 CVE-2021-24199 · GHSA-43mj-v3cx-q3x2

wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter

Priority LOW 32

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89
TI-2024-00547 CVE-2024-0591 · GHSA-w3x6-wpp4-45cx

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.

Priority LOW 28

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A' parameter in all versions up to, and including, 3.4.2.2 due t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00605 Published 2024-03-13 No fix listed CWE-79
TI-2022-11902 CVE-2022-29432 · GHSA-qx45-wmfv-9pxq

WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Priority LOW 23

Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2022-05-20 No fix listed CWE-79
Open these records in search →