CVE Catalog
CVE-2026-66594
HighCVSS 8.5Summary
Subscriber SQL Injection in WordPress Persistent Login versions up to 3.1.0. A user with subscriber role can execute unauthorized database queries.
Risk Assessment
Risk of data leakage, database modification, or full site compromise.
Recommendation
Update the WordPress Persistent Login plugin to the latest version with the security fix.
Other vulnerabilities in WordPress Persistent Login
Original NVD description (English source)
Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

