WPDataTables
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| wpDataTables – Tables & Table Charts | 4 | – | Apr 12, 2021 |
| wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 4 | – | Apr 20, 2026 |
| wpDataTables | 2 | – | Aug 6, 2026 |
| wpDataTables (Premium) | 1 | – | Jun 1, 2024 |
Exploited and recent CVEs
- CVE-2026-65509 WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-54825 WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability 0.4%
- CVE-2026-5721 wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import 0.3%
- CVE-2024-3820 wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection 0.7%
- CVE-2024-3821 wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification 0.3%
- CVE-2024-4895 wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import 0.4%
- CVE-2024-0591 wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. 0.6%
- CVE-2021-24200 wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter 1.3%
- CVE-2021-24199 wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter 1.3%
- CVE-2021-24198 wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion 1.5%
- CVE-2021-24197 wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover 1.2%