Threats tagged 'ghsa-qmx6-964c-cqv5'

The Data Tables Generator by Supsystic WordPress plugin versions before 1.15.8 lacks proper authorization or ownership checks when returning stored table contents. Instead, it relies solely on a nonce that is accessible to all anonymous visitors. This flaw allows unauthenticated users to access the full contents of any table by its identifier, including tables that are unpublished and not visible on the site.