Medium · 4.3 CVE-2024-43295 EUVD-2024-40187GHSA-5fhp-588g-xh47

WordPress WP Data Access plugin <= 5.5.7 - Cross Site Request Forgery (CSRF) vulnerability

Published Aug 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Passionate Programmers Product: WP Data Access

Description

Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data Access: from n/a through 5.5.7.

Affected products

Vendor	Product	Affected	Fixed
Passionate Programmers	WP Data Access	≤ 5.5.7	—

References

https://patchstack.com/database/vulnerability/wp-data-access/wordpress-wp-data-access-plugin-5-5-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry