Vendors / Passionate Programmer Peter Passionate Programmer Peter Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 2
Exploited now Passionate Programmer Peter records in CISA KEV No Passionate Programmer Peter vulnerabilities are listed in CISA KEV.
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00243 · Published 2026-10-07 · No fix listed CWE-89
Priority MEDIUM 46
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.004 · Published 2026-08-31 · No fix listed CWE-89
Priority MEDIUM 46
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00283 · Published 2026-06-15 · No fix listed CWE-89
Priority MEDIUM 41
Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00246 · Published 2026-09-30 · No fix listed CWE-89
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-08-06 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows DOM-Based XSS.This issue affects WP Data Access: from…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00324 · Published 2025-04-16 · No fix listed CWE-79
Priority LOW 26
Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows Cross Site Request Forgery.This issue affects WP Data Access: from n/a through 5.5.90.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS — · Published 2026-11-07 · No fix listed CWE-352
Priority LOW 26
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.0024 · Published 2026-08-13 · No fix listed CWE-79
Priority LOW 26
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00315 · Published 2026-08-20 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
3 2 4 0 0
THREATIST.IORead the docs