CVE Database /
CVE-2014-9175
CVE
CVE-2014-9175 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 1.5.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2014-9175
|
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 1.5.4 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Unknown
|
< 1.5.4
|
1.5.4 |
2014-11-23 |
—
|
CVE-2014-9175
The wpDataTables plugin through version 1.5.3 contains a SQL injection vulnerability in wpdatatables.php that can be exploited by remote attackers. The flaw exists in the get_wdtable action handler accessed through wp-admin/admin-ajax.php, where the table_id parameter is not properly sanitized. An attacker can leverage this vulnerability to execute arbitrary SQL commands against the database. The issue was resolved in version 1.5.4 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings