SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-66640

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.22%

12th percentile - higher than 12% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in Login With Ajax in versions up to 4.5.1. A user with Contributor role can inject malicious script.

Risk Assessment

An attacker can steal session data or take over an administrator account, leading to site integrity compromise.

Recommendation

Update the plugin to the latest version that includes the security fix.

Other vulnerabilities in Login With Ajax

Original NVD description (English source)

Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS