CVE-2026-66668

HighCVSS 8.5

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Community by PeepSo plugin versions up to 9.0.5.2. An attacker with subscriber role can exploit this flaw to manipulate database queries.

Risk Assessment

Risk of unauthorized access to or modification of database data, potentially leading to confidentiality and integrity breaches.

Recommendation

Update the Community by PeepSo plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Subscriber SQL Injection in Community by PeepSo <= 9.0.5.2 versions.