SQL Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection.CVE-2021-26754Wpdatatables · 4.6% likely

   CWE-89

2. SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the table_…CVE-2014-9175Wpdatatables · 4.6% likely

   CWE-89

3. wpDataTables < 3.4.2 - Blind SQL Injection via length ParameterCVE-2021-24200wpDataTables · 1.3% likely

   CWE-89

4. wpDataTables < 3.4.2 - Blind SQL Injection via start ParameterCVE-2021-24199wpDataTables · 1.3% likely

   CWE-89

5. wpDataTables - Tables & Table Charts (Premium) <= 6.3.1 - Unauthenticated SQL InjectionCVE-2024-3820WPDataTables · CVSS 10 · 0.7% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.