WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by doc4cash in WordPress Plugin WP Data Access versions = 5.5.80...

CVE-2026-73344

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-73344

The CVE-2026-73344 entry concerns the WordPress WP Data Access plugin, affected versions

CVE-2026-73344 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

EUVD-2026-57910

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-73344: Improper Neutralization of Input During Web Page Generation

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

PT-2026-71600

Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WP Data Access versions = 5.5.79...

CVE-2026-18032 WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass

The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected...

CVE-2026-18032: Exposure of Sensitive Information to an Unauthorized Actor

The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected...

PT-2026-69271

Name of the Vulnerable Software and Affected Versions WP Data Access versions prior to 5.5.79 Description An issue exists where the plugin fails to validate column names accepted during an unauthenticated AJAX action. Because the nonce guarding this action does not cover the column names,...

CVE-2026-66663 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-66663

CVE-2026-66663 describes an Unauthenticated Cross Site Scripting (XSS) vulnerability in the WordPress plugin WP Data Access (versions

CVE-2026-66663

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

PT-2026-68579

Name of the Vulnerable Software and Affected Versions WP Data Access versions prior to 5.5.80 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendation...

CVE-2026-66663: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...

CVE-2026-42665 WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access = 5.5.70 versions...

CVE-2026-42665: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Data Access = 5.5.70 versions...

CVE-2026-0557

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdaapp' shortcode in all versions up to, and including, 5.5.63 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2026-0557

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdaapp' shortcode in all versions up to, and including, 5.5.63 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...