NuytsTech Security

CVE-2021-26754

by ·

wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.

Date published : 2021-02-07

https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-i/

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin

Tags: