CVE-2026-66474

The Insert Headers and Footers Code – HT Script versions up to 1.1.8 are vulnerable to an unauthenticated Cross Site Request Forgery (CSRF) attack, which could allow an attacker to execute unauthorized actions on behalf of a user without their consent. This vulnerability poses a medium risk as it can lead to unauthorized changes or data exposure within web applications using this plugin. Organizations utilizing this plugin should prioritize remediation to mitigate potential exploitation risks.