Critical · 9.3 CVE-2026-95605 EUVD-2026-94490GHSA-89mw-3f7g-8gfx

WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

Published Oct 7, 2026 · Updated Oct 7, 2026 · Assigned by Patchstack

Vendor: Passionate Programmer Peter Product: WP Data Access

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection.

This issue affects WP Data Access: from n/a through 5.5.82.

Affected products

Vendor	Product	Affected	Fixed
Passionate Programmer Peter	WP Data Access	≤ 5.5.82	—

References

https://patchstack.com/database/wordpress/plugin/wp-data-access/vulnerability/wordpress-wp-data-access-plugin-5-5-82-sql-injection-vulnerability?_s_id=cve vdb-entry