WordPress Plugin Vulnerabilities

wpDataTables < 1.5.4 - Unauthenticated SQL Injection

Description

The wpDataTables – Tables & Table Charts WordPress plugin was affected by a SQL Injection security vulnerability via the table_id parameter of the get_wdtable AJAX action, available to both unauthenticated and authenticated users

Affects Plugins

Fixed in 1.5.4

References

Classification

Type
SQLI
OWASP top 10
CWE

Miscellaneous

Submitter
Claudio Viviani
Submitter website
Submitter twitter
Verified
No

Timeline

Publicly Published
2014-11-25 (about 11 years ago)
Added
2014-11-25 (about 11 years ago)
Last Updated
2021-03-17 (about 5 years ago)

Other