CVE-2026-65509: WordPress wpDataTables plugin <= 7.5.1 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.

Affected Software

1 affected component

WordPress wpDataTables<=7.5.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress wpDataTables plugin to a version that resolves this vulnerability.
Fixed in 7.5.2

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-65509 has a severity rating of high at 7.1.

To mitigate CVE-2026-65509, update the wpDataTables plugin to version 7.5.2 or later.

CVE-2026-65509 is a Cross Site Scripting (XSS) vulnerability.

CVE-2026-65509 affects all versions of the wpDataTables plugin up to and including 7.5.1.

CVE-2026-65509 can be exploited without authentication.