CVE-2026-66447

An unauthenticated SQL injection vulnerability exists in WordPress versions 5.1.7 and earlier, allowing attackers to execute arbitrary SQL commands via malicious file uploads. This critical flaw can lead to unauthorized access to sensitive data and potentially full system compromise. WordPress site administrators and developers should prioritize patching or upgrading to mitigate the risk associated with this vulnerability.