WP DataTable

WP DataTable has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. WP DataTable is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP DataTable vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-53292

WP DataTable <= 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-06-27 00:00	WP DataTable <= 0.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting WP DataTable <= 0.2.7	`CVE-2025-53292`	6.4 Medium	Peter Thaleikis	No
2025-01-30 20:02	WP DataTable <= 0.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter WP DataTable <= 0.2.6	`CVE-2024-13566`	6.4 Medium	zaim	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv0.2.7

WP DataTable

Author

samsk

5.0(6)

100/100

Last Updated

2025-01-30 (2y ago)

Active Installs

600+

Downloads

17,422

Requires WP

4.0+

Requires PHP

Tested up to

WP 6.7.7

Created

2016-09-06 (10y ago)

WP DataTable is a WordPress plugin for insertion of static or dynamic DataTable functionality (http://datatables.net/) to any blog post or page. Extensions included: Buttons (fat=1), Column visibility, HTML5 export (fat=1), Print view (fat=1), ColReorder, FixedColumns, FixedHeader, Responsive, Select Features Provision of DataTables script and css style Full configuration via raw javascript (see https://datatables.net/reference/option/ for more info) Usage [wp-datatable id="ID" fat="LEVEL"] paging: false, responsive: true, search: true, //.. and more - see https://datatables.net/reference/option for full reference [/wp-datatable] id – specifies ID of existing table to which datatable functionality should be applied fat – (optional) provide fat version of datatables (see Fat level) CONTENT – optional datatables configuration Fat level adds Button extension with HTML5 export and Print preview + JSZip for excel export

View on WordPress.org