CVE-2020-12075

The data-tables-generator-by-supsystic plugin for WordPress (versions prior to 1.9.92 ) is vulnerable to a security flaw where it lacks sufficient capability checks for AJAX actions . This oversight allows for unauthorized access to specific actions, potentially leading to unauthorized data manip...

CVE-2020-12076

The WordPress plugin Data Tables Generator by Supsystic is vulnerable prior to version 1.9.92 due to missing CSRF nonce checks on AJAX actions, leading to stored XSS. Multiple sources (NVD/Red Hat/OpenVAS entries and related advisories) confirm this issue and its impact. Remediation: upgrade to 1...

CVE-2022-2114

The CVE-2022-2114 entry concerns the WordPress plugin Data Tables Generator by Supsystic. The vulnerability arises because the plugin before version 1.10.20 does not sanitise and escape certain Table settings, enabling stored XSS for high-privilege users (e.g., admin) when unfiltered_html is disa...