CVE-2026-66663: WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

Affected Software

1 affected component

WordPress WP Data Access plugin<=5.5.79

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/WP Data Access to a version that resolves this vulnerability.
Fixed in 5.5.80

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-66663 is rated high with a score of 7.1.

To fix CVE-2026-66663, update the WP Data Access plugin to version 5.5.80 or later.

CVE-2026-66663 is an unauthenticated Cross Site Scripting (XSS) vulnerability.

CVE-2026-66663 affects WP Data Access plugin versions up to and including 5.5.79.

Yes, CVE-2026-66663 can be exploited without authentication.