wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin, f039f3b4b44f656039e6e01ea60a0fa072b4a09a
- CVE, Research URL
- Home page URL
- Published on
- Aug 16, 2023
- Research Description
- wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 2.1.66 wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection The wpDataTables - Tables & Table Charts plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.65 via deserialization of untrusted input in multiple functions. This allows authenticated attackers with administrator capabilities to inject a PHP Object. The additional presence of a POP chain may allow attackers to delete arbitrary files.
- Affected versions
-
max 2.1.66.
- Status
-
vulnerable