Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: TMS Component: Wpdatatables Clear all filters
TI-2024-00547 CVE-2024-0591 · GHSA-w3x6-wpp4-45cx

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.

Priority LOW 28

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A' parameter in all versions up to, and including, 3.4.2.2 due t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00605 Published 2024-03-13 No fix listed CWE-79
TI-2023-03986 CVE-2023-4314 · GHSA-j3w9-3jjx-5qp2

wpDataTables < 2.1.66 - Admin+ PHP Object Injection

Priority HIGH 67

The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01594 Published 2023-09-11 Fixed in 2.1.66
TI-2022-11902 CVE-2022-29432 · GHSA-qx45-wmfv-9pxq

WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Priority LOW 23

Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00529 Published 2022-05-20 No fix listed CWE-79
TI-2021-06492 CVE-2021-24200 · GHSA-cv9q-2p8x-2xxf

wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter

Priority LOW 32

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89
TI-2021-06491 CVE-2021-24199 · GHSA-43mj-v3cx-q3x2

wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter

Priority LOW 32

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01341 Published 2021-04-12 Fixed in 3.4.2 CWE-89