Passionate Programmer Peter

Products

ProductCVEsExploitedLatest
WP Data Access9–Nov 7, 2026

Exploited and recent CVEs

  • CVE-2026-121783 Medium 6.5 WordPress WP Data Access plugin <= 5.5.90 - Cross Site Request Forgery (CSRF) vulnerability –
  • CVE-2026-95605 Critical 9.3 WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability 0.2%
  • CVE-2026-93621 High 8.2 WordPress WP Data Access plugin <= 5.5.84 - SQL Injection vulnerability 0.2%
  • CVE-2026-81293 Critical 9.3 WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability 0.4%
  • CVE-2026-66595 Medium 5.9 WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability 0.3%
  • CVE-2026-73344 Medium 5.9 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-66663 High 7.1 WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-42665 Critical 9.3 WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability 0.3%
  • CVE-2025-39582 Medium 6.5 WordPress WP Data Access plugin <= 5.5.36 - Cross Site Scripting (XSS) Vulnerability 0.3%