Skip to content
Noroxi

WP Data Access

wp-data-access · plugin

Known security vulnerabilities for WP Data Access. Find out in seconds which version runs on your site with WP Lens.

12 known vulnerabilities

2 critical · 1 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2026-81293

    WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2026-42665

    WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability

    Critical 9.3

  • CVE-2023-1874

    WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation

    High 8.8

  • CVE-2026-93621

    WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

    High 8.2

  • CVE-2024-12428

    WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection

    High 7.5

  • CVE-2026-66663

    WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2025-39582

    WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) Vulnerability

    Medium 6.5

  • CVE-2026-0557

    WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode

    Medium 6.4

  • CVE-2026-66595

    WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

    Medium 5.9

  • CVE-2026-73344

    WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

    Medium 5.9

  • CVE-2026-3235

    WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access

    Medium 5.3

  • CVE-2024-43295

    WordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

← Back to directory