Visualizer – Tables & Charts Manager with Built-in AI Generator

Уязвимости

• CVE-2019-16932без авторизации

  A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

  Критич. 10.0

• CVE-2024-35736нужен вход≤ 3.11.1

  WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability

  Высокий 8.8

• CVE-2024-3750подписчик+≤ 3.10.15

  Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution

  Высокий 8.8

• CVE-2022-2444участник+≤ 3.7.9

  Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization

  Высокий 8.8

• CVE-2026-65526нужен вход≤ 4.0.1

  WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2026-13468без авторизации≤ 4.0.3

  Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint

  Высокий 7.5

• CVE-2026-24573нужен вход→ 4.0.0

  WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2025-12483участник+≤ 3.11.12

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection

  Средний 6.5

• CVE-2026-15653участник+≤ 4.0.5

  Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter

  Средний 6.4

• CVE-2025-1065участник+≤ 3.11.8

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File

  Средний 6.4

• CVE-2024-27958без авторизации · нужен клик≤ 3.10.5

  WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2019-16931без авторизации · нужен клик

  A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript w

  Средний 6.1

• CVE-2023-23708участник+≤ 3.9.4

  WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2022-46848участник+≤ 3.9.1

  WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2026-8689подписчик+≤ 3.11.14

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification

  Средний 4.3