Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:23:55 +0000 cnvd-2021-28751 https://cve.radiocsirt.org/vuln/cnvd-2021-28751 cnvd-2021-28751 https://cve.radiocsirt.org/vuln/cnvd-2021-28751 EUVD-2026-23619 https://cve.radiocsirt.org/vuln/euvd-2026-23619 EUVD-2026-23619 https://cve.radiocsirt.org/vuln/euvd-2026-23619 fkie_cve-2021-24199 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24199 <p>The wpDataTables – Tables &amp; Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, on the &#39;start&#39; HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.</p> <p>The wpDataTables – Tables &amp; Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, on the &#39;start&#39; HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-24199 GHSA-43mj-v3cx-q3x2 https://cve.radiocsirt.org/vuln/ghsa-43mj-v3cx-q3x2 <p>The wpDataTables – Tables &amp; Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, on the &#39;start&#39; HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.</p> <p>The wpDataTables – Tables &amp; Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, on the &#39;start&#39; HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.</p> https://cve.radiocsirt.org/vuln/ghsa-43mj-v3cx-q3x2 gsd-2021-24199 https://cve.radiocsirt.org/vuln/gsd-2021-24199 gsd-2021-24199 https://cve.radiocsirt.org/vuln/gsd-2021-24199