Description
WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) is prone to multiple vulnerabilities, including SQL injection and security bypass vulnerabilities. Exploiting these issues may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database, or to perform otherwise restricted actions and subsequently access or delete the data of another user. WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts (Premium) version 3.4.1 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.4.2 or latest
References
Related Vulnerabilities
WordPress Plugin DMCA WaterMarker Cross-Site Scripting (1.0)
MongoDb Integer Overflow or Wraparound Vulnerability (CVE-2019-2392)
WordPress Plugin WP-Testimonials SQL Injection (3.4.1)
MySQL CVE-2020-14828 Vulnerability (CVE-2020-14828)
WordPress Plugin Booking Package-Appointment Booking Calendar System Cross-Site Scripting (1.5.10)