WP
Vendor
wpDataTables
13
CVEs
0
On KEV
0
New 30D
Products
WP9.8
wpDataTables
wpDataTables
4 CVEs0 on KEV0 new
WT8.1
wpDataTables – Tables & Table Charts
wpDataTables
4 CVEs0 on KEV0 new
WW7.3
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
wpdatatables
4 CVEs0 on KEV0 new
WP10.0
wpDataTables (Premium)
WPDataTables
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-65509 | WP wpDataTables wpDataTables | 7.1 | Aug 6 | WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54825 | WP wpDataTables wpDataTables | 9.3 | Jun 26 | WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability |
| CVE-2026-5721 | WW wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin wpdatatables | 4.7 | Apr 20 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import |
| CVE-2024-3820 | WP wpDataTables (Premium) WPDataTables | 10.0 | Jun 1 | wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection |
| CVE-2024-3821 | WW wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin wpdatatables | 7.3 | Jun 1 | wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification |
| CVE-2024-4895 | WW wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin wpdatatables | 4.7 | May 23 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import |
| CVE-2024-0591 | WW wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin wpdatatables | 6.1 | Mar 13 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. |
| CVE-2021-24200 | WT wpDataTables – Tables & Table Charts wpDataTables | 6.5 | Apr 12 | wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter |
| CVE-2021-24199 | WT wpDataTables – Tables & Table Charts wpDataTables | 6.5 | Apr 12 | wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter |
| CVE-2021-24198 | WT wpDataTables – Tables & Table Charts wpDataTables | 8.1 | Apr 12 | wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion |
| CVE-2021-24197 | WT wpDataTables – Tables & Table Charts wpDataTables | 8.1 | Apr 12 | wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover |
| CVE-2021-26754 | WP Wpdatatables Wpdatatables | 9.8 | Feb 7 | wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection |
| CVE-2014-9175 | WP Wpdatatables Wpdatatables | – | Dec 2 | SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the… |