Wp Data Access

WordPress plugin · wp-data-access · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Wp Data Access on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
HIGH CVSS 7.5	WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass CVE.org	>=0, <5.5.79	v5.5.79	CVE-2026-18032	Aug 9, 2026
MEDIUM CVSS 5.0	WP Data Access < 5.5.88 - Subscriber+ SSRF CVE.org	>=0, <5.5.88	v5.5.88	CVE-2026-106470	Oct 17, 2026
MEDIUM CVSS 5.3	WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export CVE.org	>=0, <5.5.84	v5.5.84	CVE-2026-106099	Oct 14, 2026
MEDIUM CVSS 5.3	WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update CVE.org	>=0, <5.5.77	v5.5.77	CVE-2026-106098	Oct 14, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.