CVE-2026-66455

MediumCVSS 6.0

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Broken Access Control vulnerability in ReactPress versions up to 3.4.0, exploitable by a user with Subscriber role.

A low-privileged user can access administrative functions, potentially leading to content modification or privilege escalation.

Update the ReactPress plugin to the latest patched version.

Original NVD description (English source)

Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.