sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total22
Critical4
High6
Medium12
Reset
Showing 1-20 of 22 records
Threat Entry Updated 2026-11-07

Wp Data Access - Security Vulnerability (CVE-2026-118267)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege Escalation in all versions up to, and including, 5.5.89 This is due to the plugin's write endpoints (`wpda/app/update`, `wpda/app/delete`, `wpda/app/insert`) passing the attacker-supplied `key` and `val` parameters directly to `$wpdadb->update`, `$wpdadb->delete`, and `$wpdadb->insert` without enforcing the container's row-filter (`defaultWhere`) or per-column allow-list (`isSelected`) restrictions that are correctly applied on the read endpoints. This makes it possible for authenticated attackers, with Subscriber-level access and above, to…

PLUGIN Wp Data Access

CVE-2026-118267

HIGH CVSS 8.1 2026-11-07
Open Full Technical Breakdown
Threat Entry Updated 2026-11-08

Wp Data Access - Security Vulnerability (CVE-2026-121536)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via the 'engine' parameter in all versions up to, and including, 5.5.90 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable…

PLUGIN Wp Data Access

CVE-2026-121536

MEDIUM CVSS 5.3 2026-11-07
Open Full Technical Breakdown
Threat Entry Updated 2026-11-07

Wp Data Access - Security Vulnerability (CVE-2026-120479)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Data Projects front-end simple form in versions up to, and including, 5.5.90 This is due to insufficient input sanitization and output escaping on the value of TEXT/TINYTEXT/MEDIUMTEXT/LONGTEXT columns rendered by the WPDA_Simple_Form_Item_Textarea::show_item() method, which emits the stored column value directly inside a element after only replacing '&' with '&'. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web…

PLUGIN Wp Data Access

CVE-2026-120479

MEDIUM CVSS 6.4 2026-11-07
Open Full Technical Breakdown
Threat Entry Updated 2026-11-07

Wp Data Access - Security Vulnerability (CVE-2026-118204)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageURL column value (populated from wp_usermeta.description in the demonstrated path)' parameter in all versions up to, and including, 5.5.89 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires an administrator to have published a DataTables…

PLUGIN Wp Data Access

CVE-2026-118204

MEDIUM CVSS 6.4 2026-11-07
Open Full Technical Breakdown
Threat Entry Updated 2026-11-07

Wp Data Access - Security Vulnerability (CVE-2026-118048)

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup label in versions up to, and including, 5.5.89 This is due to insufficient output escaping on the value returned by WPDA_Autocomplete::autocomplete_lookup() when it is emitted into a single-quoted HTML attribute by WPDA_Simple_Form_Item_Autocomplete::show_item() (the escape-output lint is explicitly suppressed on the echo line). This makes it possible for authenticated attackers, with Subscriber-level access and above, who are permitted to edit a lookup row through a legacy Form, to inject arbitrary web scripts…

PLUGIN Wp Data Access

CVE-2026-118048

MEDIUM CVSS 6.4 2026-11-07
Open Full Technical Breakdown
Threat Entry Updated 2026-11-03

Wp Data Access - Security Vulnerability (CVE-2026-110023)

The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.88 via the 'rel_tab' parameter. This makes it possible for unauthenticated attackers to extract every row and column of the underlying database table backing any anonymously published app, including WordPress user password hashes, email addresses, and password-reset keys from wp_users. Exploitation requires that an administrator has published at least one app with its REST API authorization set to 'anonymous', which…

PLUGIN Wp Data Access

CVE-2026-110023

MEDIUM CVSS 5.9 2026-10-31
Open Full Technical Breakdown
Threat Entry Updated 2026-10-08

Wp Data Access - Security Vulnerability (CVE-2026-95605)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.

PLUGIN Wp Data Access

CVE-2026-95605

CRITICAL CVSS 9.3 2026-10-07
Open Full Technical Breakdown
Threat Entry Updated 2026-08-28

Wp Data Access - Security Vulnerability (CVE-2026-3235)

The WP Data Access plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.5.68 via the 'check_app_access' function due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to access data from protected app containers by exploiting a mismatch between the authorization check (performed against app_id) and data retrieval (performed using cnt_id without verifying container ownership).

PLUGIN Wp Data Access

CVE-2026-3235

MEDIUM CVSS 5.3 2026-08-26
Open Full Technical Breakdown
Threat Entry Updated 2026-08-26

WP Data Access - Improper Input Validation (CVE-2026-18032)

The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected front-end form is bound to, including user password hashes where that table is the users table.

PLUGIN WP Data Access

CVE-2026-18032

HIGH CVSS 7.5 2026-08-09
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Wp Data Access - Cross-Site Scripting (XSS) (CVE-2026-0557)

The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpda_app' shortcode in all versions up to, and including, 5.5.63 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Wp Data Access

CVE-2026-0557

MEDIUM CVSS 6.4 2026-02-14
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

WP Data Access - SQL Injection (CVE-2024-12428)

The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'order[user_login][dir]' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

PLUGIN WP Data Access

CVE-2024-12428

HIGH CVSS 7.5 2024-12-25
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.