CVE-2026-49080
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
There is an unauthenticated SQL injection vulnerability in wpDataTables versions up to 7.3.6.
Risk Assessment
An attacker could exploit this vulnerability to gain access to database data, potentially leading to information leakage or system compromise.
Recommendation
It is recommended to update wpDataTables to the latest version to mitigate this vulnerability.
Other vulnerabilities in wpDataTables
See all- CVE-2026-66597High
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to 6.5.1.4. An attacker can inject malicious script without authentication.
- CVE-2026-57672High
The wpDataTables plugin version 6.5.1.1 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
- CVE-2026-65509High
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to and including 7.5.1.
Original NVD description (English source)
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS