WordPress plugin
DataPress (Dataverse Integration) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All DataPress (Dataverse Integration) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Authenticated (Contributor+) Server-Side Template Injection to Information Exposure ≤2.90Update to 2.91 | CVE-2026-5336 | |
| High8.8 | 2.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route 2.77 – 2.81Update to 2.81.1 | CVE-2025-7695 |
- Medium4.3Authenticated (Contributor+) Server-Side Template Injection to Information Exposure
≤2.90Update to 2.91
- High8.82.81 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via reset_password_link REST Route
2.77 – 2.81Update to 2.81.1
DataPress (Dataverse Integration): common questions
Does DataPress (Dataverse Integration) have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in DataPress (Dataverse Integration): 1 high, 1 medium. None are known to affect version null.
How do I check which version of DataPress (Dataverse Integration) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent DataPress (Dataverse Integration) vulnerability?
CVE-2026-5336, published Jun 2, 2026: Dataverse Integration <= 2.90 - Authenticated (Contributor+) Server-Side Template Injection to Information Exposure. Severity: Medium (CVSS 4.3).
Is any DataPress (Dataverse Integration) vulnerability listed in CISA KEV?
No. None of the known DataPress (Dataverse Integration) vulnerabilities is currently listed in the CISA KEV catalog.