Skip to content

Known vulnerabilities in peterschulznl WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

Is your version affected?

CVE Summary Score Published
CVE-2026-118267 WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert 8.1 High Nov 7, 2026
CVE-2026-120479 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form 6.4 Medium Nov 7, 2026
CVE-2026-118204 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer 6.4 Medium Nov 7, 2026
CVE-2026-121536 WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter 5.3 Medium Nov 7, 2026
CVE-2026-118048 WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label 6.4 Medium Nov 7, 2026
CVE-2026-110023 The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to… 5.9 Medium Oct 31, 2026

Other peterschulznl products