CVE-2026-54825

The wpDataTables plugin in versions 7.4 and earlier contains an unauthenticated SQL injection vulnerability. An attacker can remotely execute arbitrary SQL queries, leading to unauthorized database access.

The risk includes sensitive data leakage, modification or deletion of database records, and potential server compromise.

Immediately update the wpDataTables plugin to the latest available version that fixes this vulnerability. If an update is not possible, temporarily disable the plugin or apply WAF rules to block suspicious SQL queries.