CVE-2023-4314

The wpDataTables plugin versions prior to 2.1.66 fail to properly validate user-supplied data in the "Serialized PHP array" field before passing it through PHP's deserialization function. Administrators could exploit this weakness to deserialize malicious objects, potentially achieving remote code execution through available gadget chains on the server. This vulnerability poses a significant risk in multisite installations or environments where administrative privileges should not grant the ability to run arbitrary code.

Based on public CVE data (MITRE/NVD).