PULSEUnderground Intel

LIVE3signals / 24h

FEED

vulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScaler

CVE WatchSep 17, 2026

CVE-2026-66624

Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

CVSS

7.6

High

EPSS

0.3%

p21

KEV

—

Exploit Today

6

0-100

Published: Sep 17, 2026 · Last modified: Sep 17, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/wpmastertoolkit/vulnerability/wordpress-wpmastertoolkit-plugin-2-22-0-sql-injection-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-929267.3 HIG

——6A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.1d CVE-2026-666317.6 HIG

——6Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.1d CVE-2026-666307.6 HIG

——6Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.1d CVE-2026-666287.6 HIG

——6Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.1d CVE-2026-666267.6 HIG

——6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.1d CVE-2026-666257.6 HIG

——6Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.1d