CVE-2026-42665: WordPress WP Data Access plugin <= 5.5.70 - SQL Injection vulnerability
Published Jun 15, 2026
·Updated
Unauthenticated SQL Injection in WP Data Access <= 5.5.70 versions.
Affected Software
1 affected component
WP Data Access WP Data Access<=5.5.70
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WP Data Access Pluginto a version that resolves this vulnerability.Fixed in 5.5.71
Event History
Jun 15, 2026
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-42665?
CVE-2026-42665 has a critical severity rating of 9.3.
2
How do I fix CVE-2026-42665?
To fix CVE-2026-42665, upgrade WP Data Access to version 5.5.71 or later.
3
What is CVE-2026-42665?
CVE-2026-42665 is a vulnerability in the WP Data Access plugin allowing unauthenticated SQL injection.
4
What versions are affected by CVE-2026-42665?
CVE-2026-42665 affects all versions of WP Data Access up to and including 5.5.70.
5
What type of vulnerability is CVE-2026-42665?
CVE-2026-42665 is classified as a SQL Injection vulnerability.