wpDataTables

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

wpDataTables records in CISA KEV

No wpDataTables vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wpdatatables 2 records MEDIUM

Records

13 records

TI-2024-03564 CVE-2024-3820 · GHSA-84hm-vj34-8p2c

wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection

MEDIUM 50

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to SQL Injection via the 'id_key' parameter of the wdt_delete_table_row AJAX action in all versions up to,…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00657 Published 2024-06-01 No fix listed CWE-89

TI-2021-08425 CVE-2021-26754 · GHSA-f3f2-q9f6-v9qq

wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka…

MEDIUM 50

wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04615 Published 2021-02-07 No fix listed CWE-89

TI-2026-39628 CVE-2026-54825 · GHSA-q844-rcc5-845v

WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in wpDataTables <= 7.4 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-06-26 No fix listed CWE-89

TI-2014-07443 CVE-2014-9175 · GHSA-c5g6-7q93-3g2v

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and…

MEDIUM 40

SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the table_id parameter in a get_wdtable action to w…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04594 Published 2014-12-02 No fix listed CWE-89

TI-2021-06490 CVE-2021-24198 · GHSA-7rww-87xw-q7mf

wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion

LOW 38

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0147 Published 2021-04-12 Fixed in 3.4.2 CWE-284

TI-2021-06489 CVE-2021-24197 · GHSA-2qmv-ph7p-fh64

wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover

LOW 38

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01237 Published 2021-04-12 Fixed in 3.4.2 CWE-284

TI-2024-03565 CVE-2024-3821 · GHSA-3f72-vxqc-2p62

wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification

LOW 32

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the wdt_ajax_actions.php f…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00325 Published 2024-06-01 No fix listed CWE-862

TI-2021-06492 CVE-2021-24200 · GHSA-cv9q-2p8x-2xxf

wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter

LOW 32

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89

TI-2021-06491 CVE-2021-24199 · GHSA-43mj-v3cx-q3x2

wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter

LOW 32

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89

TI-2026-46679 CVE-2026-65509 · GHSA-vwpv-7mgc-gcvr

WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-06 No fix listed CWE-79

TI-2024-00547 CVE-2024-0591 · GHSA-w3x6-wpp4-45cx

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.

LOW 28

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A' parameter in all versions up to, and including, 3.4.2.2 due t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00605 Published 2024-03-13 No fix listed CWE-79

TI-2024-04551 CVE-2024-4895 · GHSA-wvm8-xgxq-vvhf

Cross-site scripting in wpDataTables – WordPress Data Table, Dynamic Tables & Table…

LOW 22

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the CSV import functionality in all versions up to, and including, 3.4.2…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00374 Published 2024-05-23 No fix listed CWE-79

TI-2026-05018 CVE-2026-5721 · GHSA-3mhm-cc78-hw48

Cross-site scripting in wpDataTables – WordPress Data Table, Dynamic Tables & Table…

LOW 21

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.5.0.4.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00272 Published 2026-04-20 No fix listed CWE-79

Open these records in search →

Critical	3
High	5
Medium	5
Low	0
No CVSS	0