# Data Tables Generator by Supsystic <= 1.15.7 - Unauthenticated Insecure Direct Object Reference to Table Data Exposure via 'id' Parameter

- **ID:** WPSEC-2026-2293
- **Plugin:** Data Tables Generator by Supsystic – Excel-like, WooCommerce & Pricing Tables (`data-tables-generator-by-supsystic`), https://wordpress.org/plugins/data-tables-generator-by-supsystic/
- **Affected versions:** all versions before 1.15.8
- **Fixed in:** 1.15.8 (Update to 1.15.8 or later.)
- **Severity:** Medium 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **Weakness:** CWE-639
- **Usage among sites WPSec scans:** plugin Medium, affected versions Medium (as of 2026-11-03)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/data-tables-generator-by-supsystic
- **Fix released:** 2026-11-02
- **Published:** 2026-11-03
- **URL:** https://wpsec.com/vuln/WPSEC-2026-2293/

## Description

The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Insecure Direct Object Reference via the 'id' parameter of the front-end getPageRows AJAX action in all versions up to, and including, 1.15.7, due to the handler accepting a generic front-end nonce that is printed on every front-end page and not checking that the requested table was displayed to the visitor. This makes it possible for unauthenticated attackers to retrieve the rendered rows of any table by its ID, including tables that are not embedded on any public page.

## References

- https://wpsec.com/vuln/WPSEC-2026-2293/
- https://plugins.svn.wordpress.org/data-tables-generator-by-supsystic/tags/1.15.8/
- https://wordpress.org/plugins/data-tables-generator-by-supsystic/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-2293/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.