PULSE
FEED
vulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScalervulnKEV agrega CVE-2025-39964 — Linux / KernelvulnKEV agrega CVE-2026-53266 — Linux / KernelvulnKEV agrega CVE-2025-39682 — Linux / KernelvulnKEV agrega CVE-2026-58704 — Google / PixelvulnKEV agrega CVE-2026-76460 — Cisco / Identity Services EnginevulnKEV agrega CVE-2026-87886 — Acronis / BackupvulnKEV agrega CVE-2026-76461 — Cisco / Secure Email GatewayvulnKEV agrega CVE-2026-84869 — ConnectWise / ScreenConnectvulnKEV agrega CVE-2026-42016 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-42018 — JFrog / ArtifactoryvulnKEV agrega CVE-2026-85706 — GitLab / Community Edition and Enterprise EditionvulnKEV agrega CVE-2026-86060 — MikroTik / RouterOSvulnKEV agrega CVE-2026-67277 — MikroTik / RouterOSvulnKEV agrega CVE-2026-19490 — Citrix / NetScaler
← All CVEs
CVE WatchSep 17, 2026

CVE-2026-66630

Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.

CVSS

7.6

High

EPSS

0.3%

p21

KEV

Exploit Today

6

0-100

Published: Sep 17, 2026 · Last modified: Sep 17, 2026 · CWE-89

EPSS · 30d

Not enough EPSS history yet.

Technical description

Administrator SQL Injection in PublishPress Series <= 3.1.3 versions.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-929267.3 HIG
19.3%
6A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.23h
CVE-2026-666317.6 HIG
20.6%
6Administrator SQL Injection in MC Woocommerce Wishlist <= 1.9.21 versions.23h
CVE-2026-666287.6 HIG
20.6%
6Shop manager SQL Injection in WP-Lister Lite for eBay <= 3.8.11 versions.23h
CVE-2026-666267.6 HIG
20.6%
6Editor SQL Injection in SKT Addons for Elementor <= 4.0 versions.23h
CVE-2026-666257.6 HIG
20.6%
6Administrator SQL Injection in WC Vendors Marketplace <= 2.7.2.1 versions.23h
CVE-2026-666247.6 HIG
20.6%
6Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.23h