WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps, with AI-generated Chinese analysis, references, and POCs.

Vendor: peterschulznl

CVE ID	Title	CVSS	Severity	Published
CVE-2026-118267	WP Data Access <= 5.5.89 - Incorrect Authorization to Unauthenticated Privilege Escalation via 'key' and 'val' Parameters on app/update, app/delete, app/insert CWE-863	8.1	High	2026-11-07
CVE-2026-120479	WP Data Access <= 5.5.90 - Authenticated (Subscriber+) Stored Cross-Site Scripting via TEXT-family Column Value in Front-end Data Project Form CWE-79	6.4	Medium	2026-11-07
CVE-2026-121536	WP Data Access <= 5.5.90 - Authenticated (Subscriber+) SQL Injection via 'engine' Parameter CWE-89	5.3	Medium	2026-11-07
CVE-2026-118204	WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Image URL' Media-Type Column Renderer CWE-79	6.4	Medium	2026-11-07
CVE-2026-118048	WP Data Access <= 5.5.89 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Autocomplete Lookup Label CWE-79	6.4	Medium	2026-11-07
CVE-2026-110023	WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter CWE-862	5.9	Medium	2026-10-31

All 6 known CVE vulnerabilities affecting WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps with full Chinese analysis, references, and POCs where available.