Plugin icon

WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

wp-data-access

Vulnerabilities:

10

Last Updated:

May 4, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-09
Title
WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards < 5.5.71 - Unauthenticated SQL Injection
Fixed in
Fixed in 5.5.71
CVSS
7.5 (high)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 5.5.32
CVSS
7.1 (high)
Published
2026-02-13
Title
WP Data Access < 5.5.64 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpda_app' Shortcode
Fixed in
Fixed in 5.5.64
CVSS
6.4 (medium)
Published
2025-04-16
Title
WP Data Access < 5.5.37 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.5.37
CVSS
6.4 (medium)
Published
2024-12-24
Title
WP Data Access – App, Table, Form and Chart Builder plugin < 5.5.23 - Unauthenticated SQL Injection
Fixed in
Fixed in 5.5.23
CVSS
7.5 (high)
Published
2024-08-16
Title
WP Data Access < 5.5.9 - Cross-Site Request Forgery
Fixed in
Fixed in 5.5.9
CVSS
4.3 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.3.11
CVSS
6.1 (medium)
Published
2023-04-06
Title
WP Data Access < 5.3.8 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 5.3.8
CVSS
7.5 (high)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 5.1.4
CVSS
4.3 (medium)
Published
2021-11-08
Title
WP Data Access < 5.0.0 - Admin+ SQL Injection
Fixed in
Fixed in 5.0.0
CVSS
8.7 (high)