Visualizer – Tables & Charts Manager with Built-in AI Generator

Güvenlik açıkları

• CVE-2019-16932kimlik doğrulamasız

  A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

  Kritik 10.0

• CVE-2024-35736giriş gerekir≤ 3.11.1

  WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability

  Yüksek 8.8

• CVE-2024-3750abone+≤ 3.10.15

  Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 - Missing Authorization to Arbitrary SQL Execution

  Yüksek 8.8

• CVE-2022-2444katılımcı+≤ 3.7.9

  Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization

  Yüksek 8.8

• CVE-2026-65526giriş gerekir≤ 4.0.1

  WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability

  Yüksek 8.5

• CVE-2026-13468kimlik doğrulamasız≤ 4.0.3

  Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint

  Yüksek 7.5

• CVE-2026-24573giriş gerekir→ 4.0.0

  WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-12483katılımcı+≤ 3.11.12

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection

  Orta 6.5

• CVE-2026-15653katılımcı+≤ 4.0.5

  Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter

  Orta 6.4

• CVE-2025-1065katılımcı+≤ 3.11.8

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File

  Orta 6.4

• CVE-2024-27958kimlik doğrulamasız · tıklama gerekir≤ 3.10.5

  WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2019-16931kimlik doğrulamasız · tıklama gerekir

  A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript w

  Orta 6.1

• CVE-2023-23708katılımcı+≤ 3.9.4

  WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2022-46848katılımcı+≤ 3.9.1

  WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 5.4

• CVE-2026-8689abone+≤ 3.11.14

  Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification

  Orta 4.3