Wpdataaccess

Wp Data Access

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2024-43295

  • EPSS 0.12%
  • Published 26.08.2024 21:15:27
  • Last modified 12.09.2024 21:20:43

Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data Access: from n/a through 5.5.7.

8.8

CVE-2023-1874

  • EPSS 4.01%
  • Published 12.04.2023 14:15:07
  • Last modified 21.11.2024 07:40:03

The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attac...

9.8

CVE-2021-24866

Exploit
  • EPSS 0.55%
  • Published 06.12.2021 16:15:08
  • Last modified 21.11.2024 05:53:54

The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion