High severity8.8NVD Advisory· Published Apr 23, 2020· Updated Jun 17, 2026

CVE-2020-12076

Description

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.

Affected products

WordPress/data-tables-generator-by-supsystic plugindescription
WordPress/Data Tables Generator By Supsysticllm-fuzzy
Range: <1.9.92
Package: https://wordpress.org/plugins/data-tables-generator-by-supsystic

Patches

Vulnerability mechanics

References

www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-the-data-tables-generator-by-supsystic-plugin/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000