Threat database

10 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.3%	CVE-2026-95605WP Data Access · SQL Injection Critical9.3EPSS 0.3%2026-10-07CVE Database V5CVE-2026-95605 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82. EPSS 0.3%Vulnerability Passionate Programmer Peter #cwe-89	CVE Database V5	2026-10-07
High	8.2	EPSS 0.3%	CVE-2026-93621WP Data Access · SQL Injection High8.2EPSS 0.3%2026-09-30CVE Database V5CVE-2026-93621 Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions. EPSS 0.3%Vulnerability Passionate Programmer Peter #cwe-89	CVE Database V5	2026-09-30
Critical	9.3	EPSS 0.4%	CVE-2026-81293WP Data Access · SQL Injection Critical9.3EPSS 0.4%2026-08-31CVE Database V5CVE-2026-81293 Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions. EPSS 0.4%Vulnerability Passionate Programmer Peter #cwe-89	CVE Database V5	2026-08-31
Medium	5.9	EPSS 0.3%	CVE-2026-66595WP Data Access · Missing Authorization Medium5.9EPSS 0.3%2026-08-20CVE Database V5CVE-2026-66595 CVE-2026-66595 is a medium severity vulnerability in WP Data Access by Passionate Programmer Peter. It involves unauthenticated broken access control affecting versions up to and including 5.5.80. The flaw allows unauthorized users to access data without proper authorization checks. No patch or remediation details are provided in the available data. EPSS 0.3%Vulnerability Passionate Programmer Peter #cwe-862 #ghsa-49jg-wv7f-f5wg	CVE Database V5	2026-08-20
Medium	5.9	EPSS 0.2%	CVE-2026-73344WP Data Access · Cross-site Scripting Medium5.9EPSS 0.2%2026-08-13CVE Database V5CVE-2026-73344 Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. EPSS 0.2%Vulnerability Passionate Programmer Peter #cwe-79 #ghsa-7mm3-92v6-pmx6	CVE Database V5	2026-08-13
High	7.1	EPSS 0.3%	CVE-2026-66663WP Data Access · Cross-site Scripting High7.1EPSS 0.3%2026-08-06CVE Database V5CVE-2026-66663 CVE-2026-66663 is a high-severity vulnerability in WP Data Access versions up to and including 5.5.79. It is an unauthenticated Cross-Site Scripting (XSS) flaw that allows improper neutralization of input during web page generation. This vulnerability can lead to partial compromise of confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor. EPSS 0.3%Vulnerability Passionate Programmer Peter #cwe-79 #ghsa-8w42-33f6-xj98	CVE Database V5	2026-08-06
Critical	9.3	EPSS 0.4%	CVE-2026-42665WP Data Access · SQL Injection Critical9.3EPSS 0.4%2026-06-15CVE Database V5CVE-2026-42665 Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions. EPSS 0.4%Vulnerability Passionate Programmer Peter #cwe-89	CVE Database V5	2026-06-15
Medium	6.5	EPSS 0.3%	CVE-2025-39582WP Data Access · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Passionate… Medium6.5EPSS 0.3%2025-04-16CVE Database V5CVE-2025-39582 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Passionate Programmer Peter WP Data Access wp-data-access allows DOM-Based XSS.This issue affects WP Data Access: from n/a through <= 5.5.36. EPSS 0.3%Vulnerability Passionate Programmer Peter	CVE Database V5	2025-04-16

Showing 1–10 of 10 results · 2 duplicate CVE records merged