Vulnerabilities

TI-2026-86513 CVE-2026-121783 · GHSA-wr9r-gx9g-h7p4

Cross-site request forgery in WordPress WP Data Access plugin

LOW 26

Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows Cross Site Request Forgery.This issue affects WP Data Access: from n/a through 5.5.90.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS — Published 2026-11-07 No fix listed CWE-352

TI-2026-69252 CVE-2026-95605 · GHSA-89mw-3f7g-8gfx

SQL injection in WordPress WP Data Access plugin

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00243 Published 2026-10-07 No fix listed CWE-89

TI-2026-63074 CVE-2026-93621 · GHSA-5g83-hrq4-3rpq

WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

MEDIUM 41

Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00246 Published 2026-09-30 No fix listed CWE-89

TI-2026-56132 CVE-2026-81293 · GHSA-69cm-576w-cqq9

WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-31 No fix listed CWE-89

TI-2026-47266 CVE-2026-66595 · GHSA-49jg-wv7f-f5wg

WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

LOW 26

Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00315 Published 2026-08-20 No fix listed CWE-862

TI-2026-51464 CVE-2026-73344 · GHSA-7mm3-92v6-pmx6

WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

LOW 26

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0024 Published 2026-08-13 No fix listed CWE-79

TI-2026-47334 CVE-2026-66663 · GHSA-8w42-33f6-xj98

WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-06 No fix listed CWE-79

TI-2026-30924 CVE-2026-42665 · GHSA-7qrp-75jc-6288

WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00283 Published 2026-06-15 No fix listed CWE-89

TI-2025-26324 CVE-2025-39582 · GHSA-wfg7-fvvf-v737

WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) Vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows DOM-Based XSS.This issue affects WP Data Access: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00324 Published 2025-04-16 No fix listed CWE-79

Vulnerabilities

Filters