CVE-2026-18032

The CVE-2026-18032 entry concerns the WP Data Access WordPress plugin prior to version 5.5.79. Affected component is an unauthenticated AJAX action where column-name validation is inadequate and the action’s nonce protection does not cover the column names. This permits an unauthenticated attacke...