CVE-2026-66663

An unauthenticated cross-site scripting (XSS) vulnerability exists in WP Data Access versions up to 5.5.79, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or other malicious actions, posing a significant risk to users of the affected product. Organizations utilizing WP Data Access should prioritize patching this vulnerability to safeguard their web applications and user data.