peterschulznl
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps | 5 | – | Nov 7, 2026 |
| WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards | 4 | – | Aug 26, 2026 |
| Code Manager | 1 | – | May 1, 2026 |
Exploited and recent CVEs
- CVE-2026-120479 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form –
- CVE-2026-118204 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer –
- CVE-2026-121536 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter –
- CVE-2026-118048 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label –
- CVE-2026-110023 WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter 0.3%
- CVE-2026-3235 WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access 0.4%
- CVE-2024-13362 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 0.3%
- CVE-2026-0557 WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode 0.2%
- CVE-2024-12428 WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection 0.5%
- CVE-2023-1874 WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation 2.7%