CVE-2026-65509
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to and including 7.5.1.
Risk Assessment
An attacker can inject malicious script, potentially leading to data theft or session hijacking.
Recommendation
Update the wpDataTables plugin to the latest version that includes the security fix.
Other vulnerabilities in wpDataTables
See all- CVE-2026-66597High
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to 6.5.1.4. An attacker can inject malicious script without authentication.
- CVE-2026-57672High
The wpDataTables plugin version 6.5.1.1 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
- CVE-2026-49080Critical
There is an unauthenticated SQL injection vulnerability in wpDataTables versions up to 7.3.6.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.