VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

wpDataTables (Premium) security & vulnerabilities

wpdatatables— active installsLast vulnerability Aug 19, 2026

No known unpatched vulnerabilities in the latest version

All 24 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
24Known vulnerabilities
  • Critical3
  • High11
  • Medium10
  • Low0
Vulnerabilities per year
2014: 2 vulnerabilities2142019: 2 vulnerabilities2192021: 5 vulnerabilities5212022: 2 vulnerabilities2222023: 2 vulnerabilities2232024: 4 vulnerabilities4242026: 7 vulnerabilities726

All wpDataTables (Premium) vulnerabilities

wpDataTables (Premium) vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting
≤6.5.1.4Update to 6.5.1.5
CVE-2026-66597
High7.2Unauthenticated Stored Cross-Site Scripting
≤7.5.1Update to 7.5.2
CVE-2026-65509
High7.2Unauthenticated Stored Cross-Site Scripting
≤6.5.1.1Update to 6.5.1.2
CVE-2026-57672
High7.5Unauthenticated SQL Injection
≤7.4Update to 7.4.1
CVE-2026-54825
High7.5Unauthenticated SQL Injection
≤7.3.6Update to 7.4
CVE-2026-49080
Medium4.7Unauthenticated Stored Cross-Site Scripting via CSV/Excel Data Import
≤6.5.0.4Update to 6.5.0.5
CVE-2026-5721
High8.1Unauthenticated Local File Inclusion
≤6.5.0.1Update to 6.5.0.2
CVE-2026-28039
Critical10.0Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL Injection
≤6.3.1Update to 6.3.2
CVE-2024-3820
High7.3Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification
≤6.3.2Update to 6.4
CVE-2024-3821
Medium4.7Unauthenticated Stored Cross-Site Scripting via CSV Import
≤3.4.2.12Update to 3.4.2.14
CVE-2024-4895
Medium6.1Reflected Cross-Site Scripting.
≤3.4.2.4Update to 3.4.2.5
CVE-2024-0591
Medium6.6Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection
<2.1.66Update to 2.1.66
CVE-2023-4314
Medium6.4 Authenticated (Contributor+) Stored Cross Site Scripting
≤2.1.49Update to 2.1.50
CVE-2023-23876
Medium5.5Authenticated Cross-Site Scripting
≤2.1.27Update to 2.1.28
CVE-2022-29432
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
≤2.1.27Update to 2.1.28
CVE-2022-25618
Medium6.5Blind SQL Injection via start Parameter
<3.4.2Update to 3.4.2
CVE-2021-24199
High8.1Improper Access Control leading to Table Data Deletion
<3.4.2Update to 3.4.2
CVE-2021-24198
High8.1Improper Access Control leading to Table Permission Takeover
<3.4.2Update to 3.4.2
CVE-2021-24197
Medium6.5Blind SQL Injection via length Parameter
<3.4.2Update to 3.4.2
CVE-2021-24200
High8.8SQL Injection
≤3.4Update to 3.4.1
CVE-2021-26754
Medium6.1Cross-Site Scripting
≤2.0.11Update to 2.0.12
CVE-2019-6011
High7.2SQL injection
≤2.0.11Update to 2.0.12
CVE-2019-6012
Critical9.8Arbitrary File Upload
<1.5.4Update to 1.5.4
—
Critical9.8SQL Injection
≤1.5.3Update to 1.5.4
CVE-2014-9175

wpDataTables (Premium): common questions

Does wpDataTables (Premium) have known vulnerabilities?

Yes. VulnCrest Radar lists 24 known vulnerabilities in wpDataTables (Premium): 3 critical, 11 high, 10 medium. None are known to affect version null.

How do I check which version of wpDataTables (Premium) I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent wpDataTables (Premium) vulnerability?

CVE-2026-66597, published Aug 19, 2026: wpDataTables (Premium) <= 6.5.1.4 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any wpDataTables (Premium) vulnerability listed in CISA KEV?

No. None of the known wpDataTables (Premium) vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?