peterschulznl WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

• CVE-2026-118267 High 8.1 WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert –
• CVE-2026-120479 Medium 6.4 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form –
• CVE-2026-118204 Medium 6.4 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer –
• CVE-2026-121536 Medium 5.3 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter –
• CVE-2026-118048 Medium 6.4 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label –
• CVE-2026-110023 Medium 5.9 WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter 0.3%