CVE-2026-66454

WP Social Avatar versions up to 1.5 are vulnerable to unauthenticated broken access control, allowing attackers to exploit this weakness to gain unauthorized access to sensitive functionalities or data. Organizations using this plugin should prioritize remediation to mitigate potential unauthorized access and protect user information.