An SQL Injection vulnerability exists in WP Data Access through version 5.5.92. This flaw allows improper neutralization of special elements in SQL commands, potentially enabling an attacker with low privileges and no user interaction to cause a partial denial of service and gain high confidentiality impact. The vulnerability is rated high severity with a CVSS score of 8.5.