Ninja Tables < 5.0.7 - Contributor+ Table Data Access

2024-01-2400:00:00

wpscan.com

ninja tables

vulnerability

data access

contributor-level.

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin is vulnerable to unauthorized access of data due to a missing capability check on the dragAndDropExport() function. This makes it possible for authenticated attackers, with contributor-level access and above, to export table data.