CVE-2026-106470 | WP Data Access Plugin up to 5.5.87 on WordPress server-side request forgery

October 17, 2026 Yanac

A vulnerability, which was classified as critical, was found in WP Data Access Plugin up to 5.5.87 on WordPress. The affected element is an unknown function. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-106470. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More