CVE-2024-3821: wpDataTables - Tables & Table Charts (Premium) <= 6.3.2 - Missing Authorization to DataTable Access & Modification
The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the wdtajaxactions.php file in all versions up to, and including, 6.3.2. This makes it possible for unauthenticated attackers to manipulate data tables. Please note this only affects the premium version of the plugin.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3821?
CVE-2024-3821 is classified as a high severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-2024-3821?
To mitigate CVE-2024-3821, update the wpDataTables plugin to a version beyond 6.3.2 that includes the necessary capability checks.
What versions of wpDataTables are affected by CVE-2024-3821?
All versions of the wpDataTables plugin up to and including 6.3.2 are affected by CVE-2024-3821.
What functions are impacted by CVE-2024-3821?
CVE-2024-3821 affects several functions in the wdt_ajax_actions.php file that lack proper capability checks.
Can CVE-2024-3821 lead to data leakage?
Yes, CVE-2024-3821 can potentially allow unauthorized users to access sensitive data due to the missing capability checks.