CVE-2026-66597
HighCVSS 7.1Summary
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to 6.5.1.4. An attacker can inject malicious script without authentication.
Risk Assessment
Risk of data theft, session hijacking, or injection of malicious code on the site.
Recommendation
Update the wpDataTables plugin to the latest version with the security fix.
Other vulnerabilities in wpDataTables
See all- CVE-2026-57672High
The wpDataTables plugin version 6.5.1.1 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
- CVE-2026-49080Critical
There is an unauthenticated SQL injection vulnerability in wpDataTables versions up to 7.3.6.
- CVE-2026-65509High
Unauthenticated Cross Site Scripting (XSS) in wpDataTables versions up to and including 7.5.1.
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.4 versions.