A SQL Injection vulnerability exists in the WordPress WP Data Access plugin versions up to 5.5.82. This issue allows for Blind SQL Injection attacks. The vulnerability has been assigned a CVSS score of 9.3, indicating critical severity. Defenders responsible for WordPress installations with the WP Data Access plugin should assess exposure and prioritize verification and updates to prevent potential SQL In [truncated]
HIGHPassionate Programmer PeterCVE published 2026-08-06
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-06T15:17:20.977Z and has not been modified since then. CVE-2026-66663 is an unauthenticated Cross Site Scripting (XSS) vulnerability in WP Data Access plugin version 5.5.79 or earlier. The vulnerability has a CVSS score of 7.1 and is considered HIGH severity. Affected organizations should prioritize [truncated]
CRITICALPassionate Programmer PeterCVE published 2026-06-15
The WP Data Access plugin up to version 5.5.70 is vulnerable to unauthenticated SQL injection, a critical vulnerability with a CVSS score of 9.3, indicating potential for unauthorized database access and data manipulation. Immediate assessment and patching are recommended for users of the affected plugin versions. This executive overview is based on CVE and NVD records, which confirm the vulnerability but [truncated]
