Vulnerabilities > TMS Outsource > Wpdatatables > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-03 | CVE-2023-23876 | Cross-site Scripting vulnerability in Tms-Outsource Wpdatatables Auth. | 5.4 |
| 2021-04-12 | CVE-2021-24200 | SQL Injection vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. | 4.0 |
| 2021-04-12 | CVE-2021-24199 | SQL Injection vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. | 4.0 |
| 2021-04-12 | CVE-2021-24198 | Unspecified vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. | 5.5 |
| 2021-04-12 | CVE-2021-24197 | Unspecified vulnerability in Tms-Outsource Wpdatatables The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. | 5.5 |