Vendors / wpDataTables Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now wpDataTables records in CISA KEV No wpDataTables vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04615 · Published 2021-02-07 · No fix listed CWE-89
Priority MEDIUM 40
SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the table_id parameter in a get_wdtable action to w…
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04594 · Published 2014-12-02 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
3 5 5 0 0
