12 matches found
CVE-2026-14877 Data Tables Generator by Supsystic <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Table 'id' HTML Attribute
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-14877
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 1.12.03 . The root cause is insufficient input sanitization and output escaping within the id attribute of the table component. This flaw allows authe...
CVE-2026-96648
The Data Tables Generator by Supsystic WordPress plugin (versions up to and including 1.15.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the updateRows action, specifically affecting the Table Cell 'data' valu...
CVE-2026-96648 Data Tables Generator by Supsystic <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action
The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, and including, 1.15.1 due to insufficient input sanitization and output escaping. This makes it possible for...
WordPress Data Tables Generator by Supsystic plugin <= 1.15.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by braintx in WordPress Plugin Data Tables Generator by Supsystic versions = 1.15.1...
WordPress Data Tables Generator by Supsystic plugin <= 1.12.03 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Webbernaut in WordPress Plugin Data Tables Generator by Supsystic versions = 1.12.03...
CVE-2024-56253: Missing Authorization
Missing Authorization vulnerability in supsystic Data Tables Generator by Supsystic data-tables-generator-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Data Tables Generator by Supsystic: from n/a through = 1.10.36...
CVE-2020-12076
The WordPress plugin Data Tables Generator by Supsystic is vulnerable prior to version 1.9.92 due to missing CSRF nonce checks on AJAX actions, leading to stored XSS. Multiple sources (NVD/Red Hat/OpenVAS entries and related advisories) confirm this issue and its impact. Remediation: upgrade to 1...
PT-2020-13027
Name of the Vulnerable Software and Affected Versions data-tables-generator-by-supsystic plugin versions prior to 1.9.92 Description The issue is related to the lack of capability checks for AJAX actions in the data-tables-generator-by-supsystic plugin for WordPress. Recommendations For versions...
CVE-2020-12076: Cross-Site Request Forgery (CSRF)
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS...
PT-2020-13028
Name of the Vulnerable Software and Affected Versions data-tables-generator-by-supsystic plugin versions prior to 1.9.92 Description The issue is related to the lack of CSRF nonce checks for AJAX actions, which can lead to stored XSS. Recommendations For versions prior to 1.9.92, update to versio...