peterschulznl vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20269

Newest CVEs

• CVE-2026-118267

  WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  High8.1
• CVE-2026-120479

  WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  Medium6.4
• CVE-2026-118204

  WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  Medium6.4
• CVE-2026-121536

  WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  Medium5.3
• CVE-2026-118048

  WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  Medium6.4
• CVE-2026-110023

  WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps

  Medium5.9
• CVE-2026-3235

  WP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

  Medium5.3
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2026-0557

  WP Data Access <= 5.5.63 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

  Medium6.4
• CVE-2024-12428

  WP Data Access – App, Table, Form and Chart Builder plugin <= 5.5.22 - Unauthenticated SQL Injection

  peterschulznl · WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

  High7.5