CVE-2026-118204

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 5.5.89 . The root cause is insufficient input sanitization and output escaping of the ImageURL column value (sp...