CVE Database /
CVE-2026-54825
CVE · Critical
CVE-2026-54825 — wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 7.4.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-54825
|
wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 7.4.1 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
Critical
9.3
|
< 7.4.1
|
7.4.1 |
2026-06-17 |
—
|
CVE-2026-54825
The wpDataTables Premium plugin for WordPress contains a vulnerability in versions 7.4 and earlier, allowing malicious input to be injected into database queries without proper filtering or sanitization. This flaw enables unauthorized access to sensitive data by appending arbitrary SQL commands to existing queries. As a result, unauthenticated attackers can potentially extract confidential information from the affected database.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings