CVE-2026-110016 | BDVDB-2026-404767 Detail
Data Tables Generator by Supsystic
Description#
The Data Tables Generator by Supsystic WordPress plugin before 1.15.8 does not perform any authorization or ownership check before returning the stored contents of a table, relying only on a nonce that is exposed to every anonymous visitor, allowing unauthenticated users to read the full contents of any table by its identifier, including tables that are never published anywhere on the site.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-639 Authorization Bypass Through User-Controlled Key
References#
Exploit#
History#
- Version 1Record published in the CVE List.