What’s Vulnerable › Products
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Latest wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin vulnerabilities
- CVE-2026-65509 — WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-54825 — WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-49080 — WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-5721 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import (CVSS 4.7)
- CVE-2026-28039 — WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability (CVSS 7.5)
- CVE-2024-3821 — wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification (CVSS 7.3)
- CVE-2024-4895 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import (CVSS 4.7)
- CVE-2024-0591 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. (CVSS 6.1)
- CVE-2023-4314 — wpDataTables < 2.1.66 - Admin+ PHP Object Injection (CVSS 7.2)
- CVE-2023-23876 — WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2022-29432 — WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.8)
- CVE-2021-24200 — wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter (CVSS 6.5)
- CVE-2021-24199 — wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter (CVSS 6.5)
- CVE-2021-24198 — wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion (CVSS 8.1)
- CVE-2021-24197 — wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover (CVSS 8.1)