wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin, CVE-2021-26754

CVE, Research URL: CVE-2021-26754
Home page URL: Security reports for wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
Application: wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin
Published on: Feb 08, 2021
Research Description: wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.
Affected versions: max 3.4.1.
Status: vulnerable

wpDataTables &#8211; WordPress Data Table, Dynamic Tables &amp; Table Charts Plugin, CVE-2021-26754