WordPress plugin
Visualizer – Tables & Charts Manager with Built-in AI Generator security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High6
- Medium16
- Low0
All Visualizer – Tables & Charts Manager with Built-in AI Generator vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.0.7Update to 4.0.8
- Medium4.34.0.5 - Authenticated (Contributor+) Insecure Direct Object Reference
4.0.0 – 4.0.5Update to 4.0.6
- High8.1Authenticated (Contributor+) Arbitrary File Deletion
<4.0.6Update to 4.0.6
- Medium4.3Missing Authorization
<4.0.7Update to 4.0.7
- Medium6.4Authenticated (Contributor+) Server-Side Request Forgery
≤4.0.5Update to 4.0.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter
≤4.0.5Update to 4.0.6
- Medium6.5Authenticated (Contributor+) SQL Injection
≤4.0.1Update to 4.0.2
- High7.5Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint
≤4.0.3Update to 4.0.4
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions
≤3.11.14Update to 3.11.15
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
<4.0.0Update to 4.0.0
- Medium6.5Authenticated (Contributor+) SQL Injection
≤3.11.12Update to 3.11.13
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
≤3.11.8Update to 3.11.9
- High7.5XXE Injection
≤4.6Update to 4.7
- Critical9.9Authenticated (Subscriber+) SQL Injection
≤3.11.1Update to 3.11.2
- High8.8Missing Authorization to Arbitrary SQL Execution
≤3.10.15Update to 3.11.0
- Medium6.1Reflected Cross-Site Scripting
≤3.10.5Update to 3.10.6
- Medium5.3Missing Authorization
≤2.6.9Update to 2.6.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
≤3.9.4Update to 3.9.5
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting
≤3.9.1Update to 3.9.2
- High8.8Authenticated (Contributor+) PHAR Deserialization
≤3.7.9Update to 3.7.10
- High8.8Authenticated (Contributor+) PHAR Deserialization
≤3.7.9Update to 3.7.10
- Medium6.1Reflected Cross-Site Scripting
≤3.7.6Update to 3.7.7
- Medium6.1Stored Cross-Site Scripting
≤3.3.0Update to 3.3.1
- Critical9.3Server-Side Request Forgery
≤3.3.0Update to 3.3.1
Visualizer – Tables & Charts Manager with Built-in AI Generator: common questions
Does Visualizer – Tables & Charts Manager with Built-in AI Generator have known vulnerabilities?
Yes. VulnCrest Radar lists 24 known vulnerabilities in Visualizer – Tables & Charts Manager with Built-in AI Generator: 2 critical, 6 high, 16 medium. At least one is not fixed in the latest version.
How do I check which version of Visualizer – Tables & Charts Manager with Built-in AI Generator I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Visualizer – Tables & Charts Manager with Built-in AI Generator vulnerability?
CVE-2026-86784, published Sep 14, 2026: Visualizer <= 4.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Visualizer – Tables & Charts Manager with Built-in AI Generator vulnerability listed in CISA KEV?
No. None of the known Visualizer – Tables & Charts Manager with Built-in AI Generator vulnerabilities is currently listed in the CISA KEV catalog.