CVE-2026-118267

The WP Data Access plugin for WordPress (versions up to and including 5.5.89 ) is vulnerable to Incorrect Authorization leading to Privilege Escalation . The vulnerability exists because the plugin's write endpoints (wpda/app/update, wpda/app/delete, and wpda/app/insert) fail to enforce row-filte...