Plugin icon

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin

wpdatatables

Vulnerabilities:

17

Last Updated:

March 30, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-03-03
Title
wpDataTables (Premium) < 6.5.0.2 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 6.5.0.2
CVSS
8.1 (high)
Published
2024-05-31
Title
wpDataTables - Tables & Table Charts (Premium) < 6.3.2 - Unauthenticated SQL Injection
Fixed in
Fixed in 6.3.2
CVSS
10 (critical)
Published
2024-05-31
Title
wpDataTables - Tables & Table Charts (Premium) < 6.4 - Missing Authorization to DataTable Access & Modification
Fixed in
Fixed in 6.4
CVSS
7.3 (high)
Published
2024-05-22
Title
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin < 3.4.2.14 - Unauthenticated Stored Cross-Site Scripting via CSV Import
Fixed in
Fixed in 3.4.2.14
CVSS
4.7 (medium)
Published
2024-02-20
Title
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin < 3.4.2.5 - Reflected Cross-Site Scripting.
Fixed in
Fixed in 3.4.2.5
CVSS
6.1 (medium)
Published
2023-08-17
Title
wpDataTables < 2.1.66 - Admin+ PHP Object Injection
Fixed in
Fixed in 2.1.66
CVSS
6.6 (medium)
Published
2023-02-20
Title
wpDataTables < 2.1.50 - Contributor+ Stored XSS
Fixed in
Fixed in 2.1.50
CVSS
6.8 (medium)
Published
2022-05-06
Title
wpDataTables < 2.1.28 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.28
CVSS
3.4 (low)
Published
2022-04-04
Title
wpDataTables < 2.1.28 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.28
CVSS
3.4 (low)
Published
2021-03-16
Title
wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter
Fixed in
Fixed in 3.4.2
CVSS
9.9 (critical)
Published
2021-03-16
Title
wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover
Fixed in
Fixed in 3.4.2
CVSS
8.3 (high)
Published
2021-03-16
Title
wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter
Fixed in
Fixed in 3.4.2
CVSS
9.9 (critical)
Published
2021-03-16
Title
wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion
Fixed in
Fixed in 3.4.2
CVSS
6.5 (medium)
Published
2021-02-04
Title
wpDataTables < 3.4.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.4.1
CVSS
9.8 (critical)
Published
2019-10-11
Title
wpDataTables < 2.0.12 - Cross-Site Scripting (XSS) & SQL Injection
Fixed in
Fixed in 2.0.12
CVSS
7.2 (high)
Published
2014-11-25
Title
wpDataTables < 1.5.4 - Unauthenticated Shell Upload
Fixed in
Fixed in 1.5.4
CVSS
10.0 (critical)
Published
2014-11-25
Title
wpDataTables < 1.5.4 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.5.4
CVSS
9.4 (critical)