AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-66446

CRITICAL · CVSS 9.3 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

The vulnerability allows for SQL injection in If-So Dynamic Content Personalization versions 1.10 and earlier, potentially enabling attackers to manipulate database queries and gain unauthorized access to sensitive data. Organizations using affected versions should prioritize patching this critical flaw to mitigate the risk of data breaches and unauthorized data manipulation. Immediate action is essential for any entity relying on this plugin for dynamic content management.

CVE
CVE-2026-66446
Severity
CRITICAL
CVSS
9.3
EPSS
0.38%

Original NVD Description

Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.