Description
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TMS | wpDataTables | ≤ 7.3.6 | — |
Critical · 9.3
CVE-2026-49080
EUVD-2026-37496GHSA-hxvm-fhhx-4252
WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack