Search Results (6 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-95605 1 Passionate Programmer Peter 1 Wp Data Access 2026-10-07 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.
CVE-2026-81293 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-09-01 9.3 Critical
Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.
CVE-2026-66595 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-08-20 5.9 Medium
Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.
CVE-2026-73344 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-08-13 5.9 Medium
Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-66663 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-08-06 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-42665 2 Passionate Programmer Peter, Wordpress 2 Wp Data Access, Wordpress 2026-06-23 9.3 Critical
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.