CVE Catalog
CVE-2026-66464
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.19%
9th percentile - higher than 9% of all known CVEs
Summary
Broken Access Control vulnerability in Internal Link Optimiser versions up to 5.2.7, exploitable without authentication.
Risk Assessment
Unauthenticated users can access administrative functions, potentially leading to content modification or privilege escalation.
Recommendation
Update the Internal Link Optimiser plugin to the latest patched version.
Original NVD description (English source)
Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.