CVE Intelligence

Automattic WordPress vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Automattic WordPress: 1 record(s), with affected versions and fixes.

CVE-2026-66666 Medium · 6.9 CWE-201 Oct 6, 2026
WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.