Low severity3.4NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026

CVE-2022-29432

Description

Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tms Outsource/Wpdatatables
cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*
Range: <=2.1.27
WordPress/Wpdatatablesllm-fuzzy
Range: <=2.1.27
Package: https://wordpress.org/plugins/wpdatatables
TMS-Plugins/wpDataTables – Tables & Table Charts (WordPress plugin)v5
Range: <= 2.1.27

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/wpdatatables/wordpress-wpdatatables-plugin-2-1-27-multiple-authenticated-persistent-cross-site-scripting-xss-vulnerabilitiesnvdThird Party Advisory
wordpress.org/plugins/wpdatatables/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.221
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000