51 matches found
cve-2023-1874
CVE-2023-1874 Descargo de responsabilidad ESTE SCRIPT ESTÁ DISEÑADO SOLO PARA FINES EDUCATIVOS Y DE SOMBRERO BLANCO. CUALQUIER USO DE ESTO CONTRA UN DISPOSITIVO QUE NO ESTÉS AUTORIZADO A PROBAR O QUE NO POSEEAS ES TU PROPIA RESPONSABILIDAD. EL AUTOR DE ESTE SCRIPT NO SE HACE RESPONSABLE DE NADA D...
CVE-2026-81293
Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...
EUVD-2026-68780
Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...
CVE-2026-81293
CVE-2026-81293 is an unauthenticated SQL injection vulnerability in the WP Data Access WordPress plugin, affecting versions 5.5.81 and below . The flaw was discovered by sequence_X0 and reported via Patchstack. The CVSS v3.1 score is 9.3 (Critical) , with a network attack vector, low complexity, ...
CVE-2026-81293 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Data Access = 5.5.81 versions...
WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability
SQL Injection vulnerability discovered by sequenceX0 in WordPress Plugin WP Data Access versions = 5.5.81...
CVE-2026-3235
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
CVE-2026-3235
The WP Data Access plugin for WordPress is vulnerable to an unauthenticated Insecure Direct Object Reference (IDOR) in all versions up to and including 5.5.68 . The flaw resides in the check_app_access function, where a mismatch between the authorization check (performed against app_id) and the d...
CVE-2026-3235 WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
EUVD-2026-66407
The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'checkappaccess' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from...
WordPress WP Data Access plugin <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access vulnerability
Unauthenticated Insecure Direct Object Reference to Data Access vulnerability discovered by type5afe in WordPress Plugin WP Data Access versions = 5.5.68...
CVE-2026-66595
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
CVE-2026-66595 WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
CVE-2026-66595
The WordPress WP Data Access plugin (versions ≤ 5.5.80) has an unauthenticated broken access control flaw allowing remote, no-auth access to restricted functionality with HIGH confidentiality impact (CVSS 5.9). No patch version or exploitation details are provided; monitor Patchstack's advisory f...
EUVD-2026-63338
Unauthenticated Broken Access Control in WP Data Access = 5.5.80 versions...
WordPress WP Data Access plugin < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability
Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass vulnerability discovered by Farid Narimanov in WordPress Plugin WP Data Access versions 5.5.79...
CVE-2026-73344
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
EUVD-2026-57910
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...