WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

Уязвимости

• CVE-2026-81293без авторизации≤ 5.5.81

  WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2026-42665без авторизации≤ 5.5.70

  WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability

  Критич. 9.3

• CVE-2023-1874подписчик+≤ 5.3.7

  WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation

  Высокий 8.8

• CVE-2026-93621без авторизации≤ 5.5.84

  WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability

  Высокий 8.2

• CVE-2024-12428без авторизации≤ 5.5.22

  WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection

  Высокий 7.5

• CVE-2026-66663без авторизации · нужен клик≤ 5.5.79

  WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-39582нужен вход≤ 5.5.36

  WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) Vulnerability

  Средний 6.5

• CVE-2026-0557участник+≤ 5.5.63

  WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode

  Средний 6.4

• CVE-2026-66595без авторизации≤ 5.5.80

  WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

  Средний 5.9

• CVE-2026-73344автор+≤ 5.5.79

  WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2026-3235без авторизации≤ 5.5.68

  WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access

  Средний 5.3

• CVE-2024-43295без авторизации · нужен клик≤ 5.5.7

  WordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3