CVE-2026-66666

6.9 Moyenne

Publiée le 06/10/2026 à 20:16 · Modifiée le 06/10/2026 à 23:17 · Analyse NVD reportée · Source : audit@patchstack.com

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.

Traduire en français

Produits concernés

Automattic WordPress

Scores CVSS

Version	Score	Source	Vecteur
4.0	6.9 Moyenne	audit@patchstack.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-201

Références

https://patchstack.com/articles/wordpress-7-1-3-security-release?_s_id=cve
https://patchstack.com/database/wordpress/wordpress/wordpress/vulnerability/wordpress-wordpress-wordpress-7-1-2-sensitive-data-exposure-vulnerability?_s_id=cve
https://wordpress.org/news/2026/10/wordpress-7-1-3-maintenance-and-security-release/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories