Unrated severityNVD Advisory· Published Oct 14, 2026
CVE-2026-106098
CVE-2026-106098
Description
The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing a write, which allows unauthenticated attackers to modify data in an application exposed for anonymous read access even when update actions have been disabled by the administrator.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <5.5.77
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.