Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Peterschulznl CVE-2026-118267
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Incorrect Authorization leading to Privilege
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Peterschulznl CVE-2026-121536
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to generic SQL Injection via the 'engine' param
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Peterschulznl CVE-2026-120479
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Data Pro
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Peterschulznl CVE-2026-118204
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ImageUR
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Peterschulznl CVE-2026-118048
The WP Data Access plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Simple Form autocomplete lookup label in versions up to, and includ
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit
-
Peterschulznl CVE-2026-110023
The WP Data Access – App Builder for Tables, Forms, Dashboards, Charts & Maps plugin for WordPress is vulnerable to Sensitive Information Exposure in all versio
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit