Unrated severityNVD Advisory· Published May 20, 2022· Updated Apr 28, 2026

WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

CVE-2022-29432

Description

Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wpdatatablesllm-fuzzy
Range: <=2.1.27
Package: https://wordpress.org/plugins/wpdatatables
TMS-Plugins/wpDataTables – Tables & Table Charts (WordPress plugin)v5
Range: <= 2.1.27

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/wpdatatables/wordpress-wpdatatables-plugin-2-1-27-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilitiesmitrex_refsource_CONFIRM
wordpress.org/plugins/wpdatatables/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000