🧹It's time for some spring cleaning! All researchers earn over 6.25x our normal bounty rates, through May 27th, 2024, when Wordfence handles responsible disclosure for our Spring Cleaning Bug Extravaganza! Learn more about our bug bounty program
Register as a researcher and submit your vulnerabilities today!

wpDataTables (Premium)

Wordfence Intelligence > Vulnerability Database > WordPress Plugins > wpDataTables (Premium)

Information

Software Type	Plugin
Software Slug	wpdatatables
Software Status	Active
Software Website	wpdatatables.com
Software Record Last Updated	March 30, 2023

5 Vulnerabilities

wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Permission Takeover

8.1

CVE-2021-24197

Mar 16, 2021

Researchers: Veno Eivazian, Massimiliano Ferraresi

wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter

6.5

CVE-2021-24200

Mar 16, 2021

Researchers: Veno Eivazian, Massimiliano Ferraresi

wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Data Deletion

8.1

CVE-2021-24198

Mar 16, 2021

Researchers: Veno Eivazian, Massimiliano Ferraresi

wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter

6.5

CVE-2021-24199

Mar 16, 2021

Researchers: Veno Eivazian, Massimiliano Ferraresi

wpDataTables (Premium) <= 3.4 - SQL Injection

8.8

CVE-2021-26754

Feb 2, 2021

Researchers: Veno Eivazian, Massimiliano Ferraresi

Title	CVE ID	CVSS	Researchers	Date
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Permission Takeover	CVE-2021-24197	8.1	Veno Eivazian, Massimiliano Ferraresi	March 16, 2021
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via length Parameter	CVE-2021-24200	6.5	Veno Eivazian, Massimiliano Ferraresi	March 16, 2021
wpDataTables (Premium) <= 3.4.1 - Improper Access Control leading to Table Data Deletion	CVE-2021-24198	8.1	Veno Eivazian, Massimiliano Ferraresi	March 16, 2021
wpDataTables (Premium) <= 3.4.1 - Blind SQL Injection via start Parameter	CVE-2021-24199	6.5	Veno Eivazian, Massimiliano Ferraresi	March 16, 2021
wpDataTables (Premium) <= 3.4 - SQL Injection	CVE-2021-26754	8.8	Veno Eivazian, Massimiliano Ferraresi	February 2, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.