Is CVE-2026-95605 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-95605?

CVE-2026-95605 has a CVSS v3 severity of CRITICAL (9.3).

Back

CVE-2026-95605

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This issue affects WP Data Access: from n/a through 5.5.82.