title: wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter
description: The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.
problem types: CWE-89 SQL Injection
affected:
{
product: wpDataTables – Tables & Table Charts
vendor: wpDataTables
versions:
lessThan: 3.4.2, status: affected, version: 3.4.2, versionType: custom
}