wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin

Information

Software Type Plugin
Software Slug wpdatatables (view on wordpress.org)
Software Status Active
Software Author melograno
Software Website wpdatatables.com
Software Downloads 2,674,949
Software Active Installs 70,000
Software Record Last Updated July 22, 2026

14 Vulnerabilities

Submit a Vulnerability
wpDataTables (Premium) <= 6.5.1.1 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-57672
Jun 30, 2026
Researcher: Nguyen Ba Khanh
wpDataTables (Premium) <= 7.4 - Unauthenticated SQL Injection
7.5
CVE-2026-54825
Jun 17, 2026
Researcher: Expatch
wpDataTables (Premium) <= 7.3.6 - Unauthenticated SQL Injection
7.5
CVE-2026-49080
Jun 8, 2026
Researcher: Bonds
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import
4.7
CVE-2026-5721
Apr 20, 2026
Researcher: Lio
wpDataTables (Premium) <= 6.5.0.1 - Unauthenticated Local File Inclusion
8.1
CVE-2026-28039
Mar 3, 2026
Researcher: Nguyen Xuan Chien
wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification
7.3
CVE-2024-3821
May 31, 2024
Researcher: villu164
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import
4.7
CVE-2024-4895
May 22, 2024
Researcher: Tim Coen
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.
6.1
CVE-2024-0591
Feb 20, 2024
Researcher: stealthcopter
wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection
6.6
CVE-2023-4314
Aug 16, 2023
Researcher: Jonatas Souza Villa Flor
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting
6.4
CVE-2023-23876
Feb 20, 2023
Researcher: Rafshanzani Suhada
wpDataTables <= 2.1.27 - Authenticated Cross-Site Scripting
5.5
CVE-2022-29432
May 6, 2022
Researcher: R3N0
wpDataTables Lite plugin <= 2.0.11 - SQL injection
7.2
CVE-2019-6012
Oct 16, 2019
Researcher: Gen Sato
wpDataTables Lite plugin <= 2.0.11 - Cross-Site Scripting
6.1
CVE-2019-6011
Oct 16, 2019
Researcher: Gen Sato
wpDataTables (Premium) <= 1.5.3 - SQL Injection
9.8
CVE-2014-9175
Nov 23, 2014
Researcher: Claudio Viviani
Title Status CVE ID CVSS Researchers Date
wpDataTables (Premium) <= 6.5.1.1 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-57672 7.2 Nguyen Ba Khanh June 30, 2026
wpDataTables (Premium) <= 7.4 - Unauthenticated SQL Injection Patched CVE-2026-54825 7.5 Expatch June 17, 2026
wpDataTables (Premium) <= 7.3.6 - Unauthenticated SQL Injection Patched CVE-2026-49080 7.5 Bonds June 8, 2026
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 6.5.0.4 - Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import Patched CVE-2026-5721 4.7 Lio April 20, 2026
wpDataTables (Premium) <= 6.5.0.1 - Unauthenticated Local File Inclusion Patched CVE-2026-28039 8.1 Nguyen Xuan Chien March 3, 2026
wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification Patched CVE-2024-3821 7.3 villu164 May 31, 2024
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.12 - Unauthenticated Stored Cross-Site Scripting via CSV Import Patched CVE-2024-4895 4.7 Tim Coen May 22, 2024
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. Patched CVE-2024-0591 6.1 stealthcopter February 20, 2024
wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection Patched CVE-2023-4314 6.6 Jonatas Souza Villa Flor August 16, 2023
wpDataTables <= 2.1.49 - Authenticated (Contributor+) Stored Cross Site Scripting Patched CVE-2023-23876 6.4 Rafshanzani Suhada February 20, 2023
wpDataTables <= 2.1.27 - Authenticated Cross-Site Scripting Patched CVE-2022-29432 5.5 R3N0 May 6, 2022
wpDataTables Lite plugin <= 2.0.11 - SQL injection Patched CVE-2019-6012 7.2 Gen Sato October 16, 2019
wpDataTables Lite plugin <= 2.0.11 - Cross-Site Scripting Patched CVE-2019-6011 6.1 Gen Sato October 16, 2019
wpDataTables (Premium) <= 1.5.3 - SQL Injection Patched CVE-2014-9175 9.8 Claudio Viviani November 23, 2014

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation