wp-data-access vulnerabilities
CVEs whose affected-version data names the wp-data-access package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-95605Critical· 9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.
▾ MidnightPassionate Programmer Peter · wp-data-accessEPSS 0.24%via NVD
CVE-2026-93621High· 8.2Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.
Unauthenticated SQL Injection in WP Data Access <= 5.5.84 versions.
▾ TwilightPassionate Programmer Peter · wp-data-accessEPSS 0.25%via NVD