CVE-2026-106098

The WP Data Access WordPress plugin, in versions prior to 5.5.77 , contains an unauthenticated incorrect authorization vulnerability. The issue stems from an application REST endpoint that incorrectly verifies only read permissions before executing a write operation. This flaw allows unauthentica...