Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•6 views

CVE-2021-24198: Improper Access Control

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to delete the data of another user that are present in the same table through...

8.1CVSS5.8AI score0.0147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•7 views

CVE-2021-24199: Improper Neutralization of Special Elements used in an SQL Command

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'start' HTTP POST parameter. Th...

6.5CVSS5.8AI score0.01341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•10 views

CVE-2021-24200: Improper Neutralization of Special Elements used in an SQL Command

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

6.5CVSS5.8AI score0.01341EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•8 views

CVE-2021-24197: Improper Access Control

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to access the data of another user that are present in the same table by takin...

8.1CVSS5.8AI score0.01237EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/12 12:00 a.m.•4 views

PT-2021-15744

Name of the Vulnerable Software and Affected Versions: wpDataTables – Tables & Table Charts premium WordPress plugin versions prior to 3.4.2 Description: The issue allows a low-privilege authenticated user to perform Boolean-based blind SQL Injection on the "/wp-admin/admin-ajax.php?action=get...

6.5CVSS0.01341EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/04/12 12:00 a.m.•19 views

WordPress plugin WpDataTables – Tables & Table Charts premium 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

8.1CVSS5.7AI score0.0147EPSS
SaveExploits0References4
Rows per page
Query Builder