WP Data Access vulnerabilities
We track 1 vulnerability in WP Data Access products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 9, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest WP Data Access vulnerabilities
- 7.5 High severity
WP Data Access: Exposure of Sensitive Information to an Unauthorized Actor
The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of