Wpdatatables
Approved changes feed: RSS · Atom
cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*
part: a version: * update: *
| Vendor | Tms Outsource (e06af28c-629b-57f9-bfd3-23b612e47fc3) |
|---|---|
| Product | Wpdatatables (7c5653b9-200c-5da2-aa6c-52c4c3232c29) |
| Edition | * |
| Language | * |
| Software edition | premium |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23876 |
vulnerable | 2026-06-08 05:56:04.609136 |
WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TMS-Plugins wpDataTables plugin <= 2.1.49 versions.
Published: 2023-05-03T13:12:59.336Z
Updated: 2026-04-28T16:08:03.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29432 |
vulnerable | 2026-06-08 05:42:47.720995 |
WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
LOW (3.4)
Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters.
Published: 2022-05-20T20:48:20.530Z
Updated: 2026-04-28T16:07:41.318Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24200 |
vulnerable | 2026-06-08 05:30:03.952367 |
wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.
Published: 2021-04-12T13:59:38.000Z
Updated: 2024-08-03T19:21:18.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24199 |
vulnerable | 2026-06-08 05:30:03.952028 |
wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.
Published: 2021-04-12T13:59:17.000Z
Updated: 2024-08-03T19:21:18.723Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24198 |
vulnerable | 2026-06-08 05:30:03.951662 |
wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion
The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to delete the data of another user that are present in the same table through id_key and id_val parameters. By exploiting this issue an attacker is able to delete the data of all users in the same table.
Published: 2021-04-12T13:58:49.000Z
Updated: 2024-08-03T19:21:18.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24197 |
vulnerable | 2026-06-08 05:30:03.951200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.