All products
wp-data-access
WordPress · Plugin25 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insertCVE-2026-118267 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project FormCVE-2026-120479 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column RendererCVE-2026-118204 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' ParameterCVE-2026-121536 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup LabelCVE-2026-118048 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' ParameterCVE-2026-110023 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| Data Access <= 5.5.87 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2026-106470 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-13362 |
add-expires-headersadd-fields-to-checkout-page-woocommerce |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps < 5.5.77 - Missing AuthorizationCVE-2026-106098 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps < 5.5.84 - Unauthenticated Information ExposureCVE-2026-106099 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps <= 5.5.82 - Unauthenticated SQL InjectionCVE-2026-95605 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.84 - Unauthenticated SQL InjectionCVE-2026-93621 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.81 - Unauthenticated SQL InjectionCVE-2026-81293 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data AccessCVE-2026-3235 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.80 - Missing AuthorizationCVE-2026-66595 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| Data Access <= 5.5.78 - Missing AuthorizationCVE-2026-18032 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.79 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-66663 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.79 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-73344 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards <= 5.5.70 - Unauthenticated SQL InjectionCVE-2026-42665 |
wp-data-access |
WordPress |
High
|
Fix reported |
|
| WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' ShortcodeCVE-2026-0557 |
wp-data-access |
WordPress |
Medium
|
Fix reported |
|
