CVE-2026-66440

The vulnerability allows unauthenticated cross-site scripting (XSS) in WPIDE – File Manager & Code Editor versions up to 3.5.7, enabling attackers to execute arbitrary scripts in the context of users accessing the application. This can lead to data theft, session hijacking, or defacement of the web application. Organizations using affected versions should prioritize remediation to protect against potential exploits targeting their users.