Lucene search
+L

247 matches found

CNNVD
CNNVD
•added 2022/05/20 12:00 a.m.•28 views

WordPress plugin wpDataTables has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress wpDataTables plugin 2.1.27 and earlier versions have a cross-site scripting vulnerability...

4.8CVSS5.7AI score0.00529EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•11 views

CVE-2022-29432: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

4.8CVSS5.6AI score0.00529EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/05/06 1:37 p.m.•14 views

CVE-2022-29432

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text;, &data-link-url;, , &data-shortcode;, &data-star-num; vulnerable parameters...

4.8CVSS5.1AI score0.00529EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2022/05/06 12:00 a.m.•44 views

WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi Patchstack in WordPress wpDataTables plugin versions = 2.1.27. Solution Update the WordPress wpDataTables plugin to the latest available version at least 2.1.28...

4.8CVSS2.2AI score0.00529EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2022/04/07 12:00 a.m.•25 views

WordPress wpDataTables plugin跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress wpDataTables plugin 2.1.27 and earlier versio...

4.8CVSS2.4AI score0.00565EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/04 8:15 p.m.•22 views

CVE-2022-25618

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

4.8CVSS5.8AI score0.00565EPSS
SaveExploits0References2
NVD
NVD
•added 2022/04/04 8:15 p.m.•32 views

CVE-2022-25618

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

4.8CVSS0.00565EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/04/04 7:46 p.m.•13 views

CVE-2022-25618 WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

3.4CVSS4.1AI score0.00565EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/04/04 7:46 p.m.•39 views

CVE-2022-25618 WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

3.4CVSS5.1AI score0.00565EPSS
SaveExploits0References2
CVE
CVE
•added 2022/04/04 7:46 p.m.•113 views

CVE-2022-25618

CVE-2022-25618 is an authenticated (admin+) stored XSS vulnerability in the WordPress plugin wpDataTables up to version 2.1.27. Root cause details are not explicitly stated beyond the XSS classification in multiple sources, but the consensus is that versions ≤ 2.1.27 are affected. The practical i...

4.8CVSS4.3AI score0.00565EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/04/04 7:05 a.m.•10 views

CVE-2022-25618

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

4.8CVSS5.1AI score0.00565EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/04 12:00 a.m.•6 views

PT-2022-17412

Name of the Vulnerable Software and Affected Versions wpDataTables versions prior to 2.1.28 Description The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin or higher privileges can inject malicious scripts into the...

4.8CVSS5.8AI score0.00565EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/04/04 12:00 a.m.•20 views

WordPress plugin wpDataTables has a cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress wpDataTables plugin 2.1.27 and earlier versio...

4.8CVSS5.4AI score0.00565EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/04 12:00 a.m.•7 views

CVE-2022-25618: Improper Neutralization of Input During Web Page Generation

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in wpDataTables WordPress plugin versions = 2.1.27...

4.8CVSS5.5AI score0.00565EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/04/04 12:00 a.m.•60 views

WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Muhammad Daffa Patchstack Alliance in WordPress wpDataTables plugin versions = 2.1.27. Solution Update the WordPress wpDataTables plugin to the latest available version at least 2.1.28...

4.8CVSS3.1AI score0.00565EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/04/14 12:00 a.m.•25 views

WordPress plugin SQL injection vulnerability (CNVD-2021-28751)

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wpDataTables is used in one of the chart management plugin . WordPress plugin WpDataTables-Tables & Table Charts...

6.5CVSS7.2AI score0.01341EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/14 12:00 a.m.•44 views

WordPress Sprymedia DataTables SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

6.5CVSS7.6AI score0.01341EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/14 12:00 a.m.•53 views

WordPress plugin has unspecified vulnerability (CNVD-2021-28749)

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wpDataTables is used in one of the chart management plugin . WordPress plugin WpDataTables - Tables & Table Charts...

8.1CVSS6.7AI score0.01237EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/14 12:00 a.m.•53 views

WordPress Sprymedia DataTables Access Control Error Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...

8.1CVSS6.7AI score0.0147EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/04/12 2:15 p.m.•19 views

CVE-2021-24200

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=getwdtable&tableid=1, on the 'length' HTTP POST parameter...

6.5CVSS5.9AI score0.01341EPSS
SaveExploits0References3
Rows per page
Query Builder