CVE-2023-25043 MEDIUM

CVE-2023-25043: WordPress Data Tables Generator by Supsystic Plugin <= 1.10.25 is vulnerable to Broken Access Control

Vendor Supsystic
Product Data Tables Generator
Weakness CWE-863 · Incorrect authorization
Published April 17, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Incorrect Authorization vulnerability in Supsystic Data Tables Generator.This issue affects Data Tables Generator: from n/a through 1.10.25.

Explanation of Vulnerability in Simple Terms

02Summary

Data Tables Generator through version 1.10.25 contains an authorization flaw that allows authenticated users with low privileges to trigger a denial-of-service condition. The vulnerability stems from improper permission checks on certain operations, enabling a logged-in attacker to degrade site availability without requiring administrative access or user interaction.

What an attacker can do

03Attacker Capabilities

An authenticated user can make the site unavailable or unresponsive to other visitors.

Potential impact on your site

04Site Impact

Site availability may be disrupted by low-privileged users performing unauthorized operations that consume resources.

Conditions required to exploit

05Prerequisites

Attacker must have a valid user account with low-level privileges (e.g., subscriber or contributor role).

Key dates

06Disclosure timeline

April 17, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2025-14081 Ultimate Member <= 2.11.0 - Authenticated (Subscriber+) Profile Privacy Setting Bypass CVE-2026-3210 Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011 CVE-2026-0684 CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import CVE-2026-13237 AI Agents - Moderately critical - Information disclosure, Access bypass - SA-CONTRIB-2026-057 CVE-2026-4933 Unpublished Node Permissions - Critical - Access bypass - SA-CONTRIB-2026-029