CVE-2026-49080

Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.

Score

CVSS 3.1 9.3 Critical

Status

Deferred - audit@patchstack.com

Published

2026-06-16

Last modified

2026-10-26

Weaknesses

CWE-89

Affected products

• Wpdatatables (Tms)

References

• https://patchstack.com/database/wordpress/plugin/wpdatatables/vulnerability/wordpress-wpdatatables-plugin-7-3-6-sql-inj…