Data Tables Generator by Supsystic Security & Risk Analysis

The data-tables-generator-by-supsystic plugin v1.10.48 presents a mixed security posture. While it demonstrates good practices like a high percentage of prepared SQL statements and properly escaped output, significant concerns exist regarding its attack surface and historical vulnerability patterns. The presence of an unprotected AJAX handler is a critical entry point that could be exploited if not properly secured by other means, though the taint analysis shows no immediate critical flows. The plugin's history of 8 known CVEs, including high-severity issues like path traversal, missing authorization, XSS, SQL injection, and CSRF, is a major red flag. Despite the absence of currently unpatched vulnerabilities, this history suggests a recurring tendency for security flaws to be introduced or discovered. The last vulnerability reported in 2025 indicates a recent and ongoing need for vigilant security monitoring, even if this specific version appears clean of known exploits.