WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

SQL Injection vulnerability discovered by neurotx in WordPress Plugin WP Data Access versions = 5.5.82...

cve-2023-1874

CVE-2023-1874 免责声明 此脚本仅设计用于白帽子和教育目的。任何将此脚本用于未经授权测试或不属于您的设备的行为，均由您自行承担责任。此脚本作者对您使用此脚本所做的任何事情不承担任何责任。您的行为由您自己负责。 描述 CVE-2023-1874 是 WP Data Access 插件 5.3.7 及更早版本中的一个漏洞。攻击者可以在更新个人资料时提供 wpdarole 选项来提升权限。 来自 NIST： The WP Data Access plugin for WordPress is vulnerable to privilege escalation in version...

CVE-2026-93621

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

EUVD-2026-89825

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

CVE-2026-93621

The WP Data Access plugin for WordPress, versions

CVE-2026-93621 WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

CVE-2026-93621 WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

CVE-2026-93621: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Data Access = 5.5.84 versions...

WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Raphael P. Cigana in WordPress Plugin WP Data Access versions = 5.5.84...

CVE-2026-81293

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

EUVD-2026-68780

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293

CVE-2026-81293 is an unauthenticated SQL injection vulnerability in the WP Data Access WordPress plugin, affecting versions 5.5.81 and below . The flaw was discovered by sequence_X0 and reported via Patchstack. The CVSS v3.1 score is 9.3 (Critical) , with a network attack vector, low complexity, ...

CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

CVE-2026-81293: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

PT-2026-84005

Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...

WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

SQL Injection vulnerability discovered by sequenceX0 in WordPress Plugin WP Data Access versions = 5.5.81...

CVE-2026-3235

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2026-3235 WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...

CVE-2026-3235

The WP Data Access plugin for WordPress is vulnerable to an unauthenticated Insecure Direct Object Reference (IDOR) in all versions up to and including 5.5.68 . The flaw resides in the check_app_access function, where a mismatch between the authorization check (performed against app_id) and the d...