CVE-2026-73344

MediumCVSS 5.9

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile - higher than 7% of all known CVEs

Author-level Cross Site Scripting (XSS) vulnerability in WP Data Access plugin versions up to and including 5.5.79.

An author can inject malicious scripts that execute in other users' browsers, potentially leading to session theft or other attacks.

Update the WP Data Access plugin to a version newer than 5.5.79.

Original NVD description (English source)

Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.