Extension WordPress
Vulnérabilités Visualizer – Tables & Charts Manager with Built-in AI Generator
Cette page rassemble les failles publiées pour Visualizer – Tables & Charts Manager with Built-in AI Generator, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Visualizer – Tables & Charts Manager with Built-in AI Generator
17 fiches
Visualizer <= 4.0.3 – Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint
The Visualizer – Tables & Charts Manager with Built-in AI Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This is due to the plugin not properly verifying that a…
*-4.0.3
4.0.4
30/06/2026
Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 – Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14. This is due to a missing capability check on the renderChartPages() and uploadData() functions,…
*-3.11.14
3.11.15
27/05/2026
Visualizer: Tables and Charts Manager for WordPress < 4.0.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
[*, 4.0.0)
4.0.0
20/05/2026
Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 – Authenticated (Contributor+) SQL Injection
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and including, 3.11.12 due to insufficient escaping on the user supplied parameter and…
*-3.11.12
3.11.13
01/12/2025
Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization…
*-3.11.8
3.11.9
18/02/2025
PHPSpreadsheet Library < 2.3.0 – XXE Injection
The security scanner that prevents XXE attacks in the XLSX reader can be bypassed by slightly modifying the XML structure, utilizing white spaces. On servers that allow users to upload their own Excel (XLSX) sheets, Server files, and…
*-3.11.6
3.11.7
07/10/2024
Visualizer <= 3.11.1 – Authenticated (Subscriber+) SQL Injection
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the saveQuery function() in all versions up to, and including, 3.11.1 due to a missing capability check on a function that…
*-3.11.1
3.11.2
06/06/2024
Visualizer: Tables and Charts Manager for WordPress <= 3.10.15 – Missing Authorization to Arbitrary SQL Execution
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on the getQueryData() function in all versions up to, and including, 3.10.15.…
*-3.10.15
3.11.0
15/05/2024
Visualizer <= 3.10.5 – Reflected Cross-Site Scripting
The Visualizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.10.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-3.10.5
3.10.6
13/03/2024
ThemeIsle SDK <= Various Versions – Missing Authorization
Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to…
*-3.10.6
3.10.7
01/02/2024
Visualizer <= 3.9.4 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
The Visualizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 3.9.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
*-3.9.4
3.9.5
20/02/2023
Visualizer <= 3.9.1 – Authenticated(Contributor+) Stored Cross-Site Scripting
The Visualizer plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 3.9.1 due to insufficient input sanitization and output escaping in the 'renderChartPages' function. This makes it possible for authenticated attackers with…
*-3.9.1
3.9.2
06/02/2023
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 – Authenticated (Contributor+) PHAR Deserialization
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9. This makes it possible for authenticated attackers with contributor…
*-3.7.9
3.7.10
05/07/2022
Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 – Authenticated (Contributor+) PHAR Deserialization
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in the file Block.php in versions up to, and including 3.7.9. This makes it possible for…
*-3.7.9
3.7.10
05/07/2022
Visualizer <= 3.7.6 – Reflected Cross-Site Scripting
The Visualizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 3.7.6. This makes it possible for unauthenticated attackers to…
*-3.7.6
3.7.7
31/05/2022
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 – Stored Cross-Site Scripting
A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers…
*-3.3.0
3.3.1
28/09/2019
Visualizer: Tables and Charts Manager for WordPress <= 3.3.0 – Server-Side Request Forgery
A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.
*-3.3.0
3.3.1
28/09/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.