Wp Data Access App Builder For Tables Forms Charts Maps Dashboards
Monthly
Insecure Direct Object Reference in WP Data Access plugin for WordPress (all versions through 5.5.68) exposes protected app container data to unauthenticated attackers via the `check_app_access` function. The flaw stems from a logical mismatch: authorization is validated against the `app_id` parameter, but the subsequent data retrieval uses `cnt_id` without verifying that the requested container actually belongs to the authorized app - allowing a user to pass an authorized `app_id` to clear the access gate while supplying an arbitrary `cnt_id` to reach a different container's data. No public exploit code or KEV listing exists at time of analysis, but the low attack complexity and zero-authentication requirement make this straightforward to abuse opportunistically.
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Insecure Direct Object Reference in WP Data Access plugin for WordPress (all versions through 5.5.68) exposes protected app container data to unauthenticated attackers via the `check_app_access` function. The flaw stems from a logical mismatch: authorization is validated against the `app_id` parameter, but the subsequent data retrieval uses `cnt_id` without verifying that the requested container actually belongs to the authorized app - allowing a user to pass an authorized `app_id` to clear the access gate while supplying an arbitrary `cnt_id` to reach a different container's data. No public exploit code or KEV listing exists at time of analysis, but the low attack complexity and zero-authentication requirement make this straightforward to abuse opportunistically.
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.