Live › vulnerability › CVE-2026-110023
The WP Data Access plugin for WordPress exposes the full contents of database tables behind anonymously published apps through the 'rel_tab' parameter. An unauthenticated attacker can read every row and column, including WordPress user password hashes, email addresses and password-reset keys from wp_users.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-31 08:34 UTC. All times on this page are UTC.
Sites running the WP Data Access plugin at version 5.5.88 or earlier that have at least one app published with REST API authorization set to 'anonymous'. Sites without the plugin, or where every app requires authorization, are not exposed according to the description.
No product ranges from the sources yet.
5.5.88 are listed as affected.5.5.88; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.88 via the 'rel_tab' parameter. This makes it possible for unauthenticated attackers to extract every row and column of the underlying database table backing any anonymously published app, including WordPress user password hashes, email addresses, and password-reset keys from wp_users. Exploitation requires that an administrator has published at least one app with its REST API authorization set to 'anonymous', which is the standard configuration for publicly embedded apps.
This page as .md · .json · in your agent: get_signal("CVE-2026-110023")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.