Authenticated table-data deletion via attacker-selected row keys

Improper access control in wpDataTables premium before 3.4.2 allows remote authenticated users to delete other users' table data. The wdt_delete_table_row AJAX action accepts attacker-selected id_key and id_val values and uses them as the deletion condition without enforcing row ownership. A published table must enable front-end editing and restrict users to their own data; exploitation can erase every matching user's rows in that table.