Wpdatatables – Tables & Table Charts
Approved changes feed: RSS · Atom
cpe:2.3:a:wpdatatables:wpdatatables_–_tables_&_table_charts:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpdatatables (f5e55500-e157-5d40-b2d0-f822a71089c3) |
|---|---|
| Product | Wpdatatables – Tables & Table Charts (43b26e23-550e-5efc-91c5-21cff8332cf3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-24200 |
vulnerable | 2026-06-08 05:30:03.952338 |
wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.
Published: 2021-04-12T13:59:38.000Z
Updated: 2024-08-03T19:21:18.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24199 |
vulnerable | 2026-06-08 05:30:03.951996 |
wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.
Published: 2021-04-12T13:59:17.000Z
Updated: 2024-08-03T19:21:18.723Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24198 |
vulnerable | 2026-06-08 05:30:03.951622 |
wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to delete the data of another user that are present in the same table through id_key and id_val parameters. By exploiting this issue an attacker is able to delete the data of all users in the same table.
Published: 2021-04-12T13:58:49.000Z
Updated: 2024-08-03T19:21:18.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24197 |
vulnerable | 2026-06-08 05:30:03.950663 |
wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to access the data of another user that are present in the same table by taking over the user permissions on the table through formdata[wdt_ID] parameter. By exploiting this issue an attacker is able to access and manage the data of all users in the same table.
Published: 2021-04-12T13:58:04.000Z
Updated: 2024-08-03T19:21:18.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.