CVE-2026-66666: WordPress 7.1 through 7.1.2; status changes: 7.1.3 — unaffected, 7.0 through 7.0.6; status changes: 7.0.7 —…

Affected technology

WordPress · 7.1 through 7.1.2; status changes: 7.1.3 — unaffected, 7.0 through 7.0.6; status changes: 7.0.7 — unaffected, 6.9 through 6.9.9; status changes: 6.9.10 — unaffected, 6.8 through 6.8.10; status changes: 6.8.11 — unaffected, 6.7 through 6.7.9; status changes: 6.7.10 — unaffected, 6.6 through 6.6.9; status changes: 6.6.10 — unaffected
Automattic

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as low; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.