Low · 3.4 CVE-2022-29432 EUVD-2022-33770GHSA-qx45-wmfv-9pxq

WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Published May 20, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: TMS-Plugins Product: wpDataTables – Tables & Table Charts (WordPress plugin) Category: Web / CMS

Description

Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters.

Affected products

Vendor	Product	Affected	Fixed
TMS-Plugins	wpDataTables – Tables & Table Charts (WordPress plugin)	<= 2.1.27 – ≤ 2.1.27	—

References

https://wordpress.org/plugins/wpdatatables/#developers
https://patchstack.com/database/vulnerability/wpdatatables/wordpress-wpdatatables-plugin-2-1-27-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilities