What’s Vulnerable › Products

peterschulznl WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your peterschulznl WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards version is affected

Latest peterschulznl WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards vulnerabilities

• CVE-2026-106470 — WP Data Access < 5.5.88 - Subscriber+ SSRF (CVSS 5.0)
• CVE-2026-106099 — WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export (CVSS 5.3)
• CVE-2026-106098 — WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update (CVSS 5.3)
• CVE-2026-3235 — WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access (CVSS 5.3)
• CVE-2026-18032 — WP Data Access < 5.5.79 - Unauthenticated Sensitive Data Disclosure via Autocomplete Column Authorization Bypass (CVSS 7.5)
• CVE-2024-13362 — Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter (CVSS 6.1)
• CVE-2026-0557 — WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode (CVSS 6.4)
• CVE-2024-12428 — WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection (CVSS 7.5)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-43295 — WordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2023-1874 — WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
• CVE-2021-24866 — WP Data Access < 5.0.0 - Admin+ SQL Injection (CVSS 9.8)