CVE-2026-81293
CriticalCVSS 9.3Summary
An unauthenticated SQL Injection vulnerability was detected in WP Data Access versions up to 5.5.81. This vulnerability may allow an attacker to manipulate database queries.
Risk Assessment
An attacker can gain unauthorized access to data in the database, modify or delete it, potentially leading to data confidentiality and integrity breaches.
Recommendation
Update WP Data Access to the latest patched version. Additionally, use parameterized queries and restrict database privileges.
Other vulnerabilities in WP Data Access
See all- CVE-2026-66595Medium
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
- CVE-2026-42665Critical
There is an unauthenticated SQL Injection vulnerability in WP Data Access versions <= 5.5.70.
- CVE-2026-73344Medium
Author-level Cross Site Scripting (XSS) vulnerability in WP Data Access plugin versions up to and including 5.5.79.
- CVE-2026-66663High
Cross Site Scripting (XSS) vulnerability in WP Data Access plugin up to version 5.5.79, allowing an unauthenticated attacker to inject malicious scripts into pages.
Original NVD description (English source)
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.