CVE-2026-95605

Summary

A SQL Injection vulnerability in WP Data Access allows Blind SQL Injection, which can be exploited to extract sensitive information from the database.

Exploitability

Exploitation is moderately hard and requires the attacker to have access to the application. Precondition is the presence of user input in SQL queries.

Blast radius

If exploited, this could lead to unauthorized data exposure, potentially compromising sensitive information stored in the database.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WP Data Access 5.5.83 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.