Skip to content
Sign in
6.9 Medium

CVE-2026-66666 Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded…

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.

Affected products and versions

Product Affected versions Fixed in
WordPress 7.1 7.1 → 7.1.2 No fix stated
WordPress 7.0 7.0 → 7.0.6 No fix stated
WordPress 6.9 6.9 → 6.9.9 No fix stated
WordPress 6.8 6.8 → 6.8.10 No fix stated
WordPress 6.7 6.7 → 6.7.9 No fix stated
WordPress 6.6 6.6 → 6.6.9 No fix stated

Other CVEs of WordPress

The 4 CVEs of WordPress →
CVE-2026-93485 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic… 7.1 High CVE-2024-32111 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress… 5.0 Medium CVE-2024-31111 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in… 6.5 Medium
Track this CVE