CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpDataTables wpDataTables wpdatatables allows PHP Local File Inclusion.This issue affects wpDataTables: from n/a through <= 6.5.0.1.
Explanation of Vulnerability in Simple Terms
wpDataTables versions up to 6.5.0.1 contain a vulnerability that allows an attacker to read sensitive data, modify site content, or disrupt service. The attack requires user interaction—typically a victim clicking a malicious link—and does not require authentication. Update to version 6.5.1.2 or later to patch this issue.
What an attacker can do
Read sensitive data, modify site content, or disrupt service by tricking a user into clicking a link.
Potential impact on your site
Site data and content could be compromised without warning if users visit attacker-controlled pages.
Conditions required to exploit
Victim must click a malicious link; no login required.
Key dates
External resources
Related vulnerabilities
