Search/CVE-2026-66666
● CVE

CVE-2026-66666

DiscoveredOct 6, 2026UpdatedOct 6, 2026

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.

CVSS v3.1
—
EPSS
0.40%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Oct 22, 2026 → Oct 26, 2026
▲ 0.11pp
0.29% → 0.40% over 2 tracked changes
Connections
1 relationships
Timeline
disclosure → media coverage
Oct 6, 2026
Disclosure — published as a CVE record.