CVE-2026-66595
MediumCVSS 5.9Summary
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
Risk Assessment
The risk includes unauthorized access to data and functions, potentially leading to confidentiality, integrity, and availability breaches.
Recommendation
It is recommended to update WP Data Access to the latest version and implement proper access controls at the role and permission level.
Other vulnerabilities in WP Data Access
See all- CVE-2026-42665Critical
There is an unauthenticated SQL Injection vulnerability in WP Data Access versions <= 5.5.70.
- CVE-2026-73344Medium
Author-level Cross Site Scripting (XSS) vulnerability in WP Data Access plugin versions up to and including 5.5.79.
- CVE-2026-66663High
Cross Site Scripting (XSS) vulnerability in WP Data Access plugin up to version 5.5.79, allowing an unauthenticated attacker to inject malicious scripts into pages.
Original NVD description (English source)
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.