CVE-2026-118204

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageURL column value populated from wpusermeta.description in the demonstrated path' parameter in all versions up to, and including, 5.5.89 due...

EUVD-2026-118965

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageURL column value populated from wpusermeta.description in the demonstrated path' parameter in all versions up to, and including, 5.5.89 due...