medium6.9
CVE-2026-66666
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data.
Impact
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| WordPress | WordPress: From 7.1 | through 7.1.2 |
| From 7.0 | through 7.0.6 | |
| From 6.9 | through 6.9.9 | |
| From 6.8 | through 6.8.10 | |
| From 6.7 | through 6.7.9 | |
| And From 6.6 | through 6.6.9. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/articles/wordpress-7-1-3-security-release?_s_id=cve
- https://patchstack.com/database/wordpress/wordpress/wordpress/vulnerability/wordpress-wordpress-wordpress-7-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
- https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/