CVE-2024-3821

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the wdt_ajax_actions.php file in all versions up to, and including, 6.3.2. This makes it possible for unauthenticated attackers to manipulate data tables. Please note this only affects the premium version of the plugin.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Jun 1, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-382107.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-382118.2Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityCVE-2024-382128.8Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-382136.5Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-382146.5Windows Routing and Remote Access Service (RRAS) Information Disclosure VulnerabilityCVE-2024-382157.8Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2024-382169.0Azure Stack Hub Elevation of Privilege VulnerabilityCVE-2024-382175.4Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2024-382187.8Microsoft Edge (HTML-based) Memory Corruption VulnerabilityCVE-2024-382199.0Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCVE-2024-38224.8The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it back in the page, leCVE-2024-382209.0Azure Stack Hub Elevation of Privilege Vulnerability
CVE-2024-3821: High severity, CVSS 7.3 | Vulnix