All packages
WP Data Access vulnerabilities
4 known CVE vulnerabilities in WP Data Access, translated and rated.
- CVE-2026-66595Medium
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
- CVE-2026-42665Critical
There is an unauthenticated SQL Injection vulnerability in WP Data Access versions <= 5.5.70.
- CVE-2026-73344Medium
Author-level Cross Site Scripting (XSS) vulnerability in WP Data Access plugin versions up to and including 5.5.79.
- CVE-2026-66663High
Cross Site Scripting (XSS) vulnerability in WP Data Access plugin up to version 5.5.79, allowing an unauthenticated attacker to inject malicious scripts into pages.

