Passionate Programmer Peter vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Passionate Programmer Peter products: 6 record(s), with severity, exploitation and fixes.

WP Data Access 6

Exploited only (KEV) →

CVE-2026-95605 Critical · 9.3 CWE-89 Oct 7, 2026

WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.

CVE-2026-81293 Critical · 9.3 CWE-89 Aug 31, 2026

WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access <= 5.5.81 versions.

CVE-2026-66595 Medium · 5.9 CWE-862 Aug 20, 2026

WordPress WP Data Access plugin <= 5.5.80 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WP Data Access <= 5.5.80 versions.

CVE-2026-73344 Medium · 5.9 CWE-79 Aug 13, 2026

WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

CVE-2026-66663 High · 7.1 CWE-79 Aug 6, 2026

WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

CVE-2026-42665 Critical · 9.3 CWE-89 Jun 15, 2026

WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.