CVE-2026-106470
WP Data Access < 5.5.88 - Subscriber+ SSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make the server open connections to arbitrary hosts and ports, including internal ones, and read back the outcome.
| Vendor | unknown |
| Product | wp data access |
| Published | Oct 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wp data access
Be the first to know when new unknown vulnerabilities affecting unknown wp data access are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WP Data Access
0 < 5.5.88
References
Credits
Raphael P. Cigana WPScan