Wpdataaccess Wp Data Access — known CVE vulnerabilities

Every CVE whose affected-product data names Wpdataaccess Wp Data Access, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-24866 — CVSS 9.8 (critical): The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL…
• CVE-2023-1874 — CVSS 7.5 (high): The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a…
• CVE-2024-43295 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data Access: from n/a…