46 matches found
cve-2023-1874
CVE-2023-1874 Aviso Legal ESTE SCRIPT FOI PROJETADO APENAS PARA FINS EDUCACIONAIS E DE WHITE HAT. QUALQUER USO DESTE SCRIPT CONTRA UM DISPOSITIVO QUE VOCÊ NÃO ESTEJA AUTORIZADO A TESTAR OU QUE NÃO POSSUA É DE SUA TOTAL RESPONSABILIDADE. O AUTOR DESTE SCRIPT NÃO SE RESPONSABILIZA POR NADA QUE VOCÊ...
CVE-2026-3235
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
CVE-2026-3235 WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
CVE-2026-3235
The WP Data Access plugin for WordPress is vulnerable to an unauthenticated Insecure Direct Object Reference (IDOR) in all versions up to and including 5.5.68 . The flaw resides in the check_app_access function, where a mismatch between the authorization check (performed against app_id) and the d...
EUVD-2026-66407
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
WordPress WP Data Access plugin <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability discovered by type5afe in WordPress Plugin WP Data Access versions = 5.5.68...
CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
CVE-2026-66595 WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
CVE-2026-66595
The WordPress WP Data Access plugin (versions ≤ 5.5.80) has an unauthenticated broken access control flaw allowing remote, no-auth access to restricted functionality with HIGH confidentiality impact (CVSS 5.9). No patch version or exploitation details are provided; monitor Patchstack's advisory f...
EUVD-2026-63338
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
WordPress WP Data Access plugin < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability
Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin WP Data Access versions 5.5.79...
CVE-2026-73344
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-73344
The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions
EUVD-2026-57910
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
CVE-2026-73344 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
PT-2026-71600
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Data Access versions = 5.5.79...
CVE-2026-66663
Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
