Vulnerabilities > TMS Outsource > Wpdatatables
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-11 | CVE-2023-4314 | Unspecified vulnerability in Tms-Outsource Wpdatatables The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. | 7.2 |
| 2023-05-03 | CVE-2023-23876 | Cross-site Scripting vulnerability in Tms-Outsource Wpdatatables Auth. | 5.4 |
| 2022-05-20 | CVE-2022-29432 | Cross-site Scripting vulnerability in Tms-Outsource Wpdatatables Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters. | 3.5 |
| 2021-04-12 | CVE-2021-24200 | SQL Injection vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. | 4.0 |
| 2021-04-12 | CVE-2021-24199 | SQL Injection vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. | 4.0 |
| 2021-04-12 | CVE-2021-24198 | Unspecified vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. | 5.5 |
| 2021-04-12 | CVE-2021-24197 | Unspecified vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. | 5.5 |