CVE-2026-66620

The vulnerability affects versions of OptionTree up to 2.7.3, allowing for PHP Object Injection, which can lead to remote code execution and unauthorized access to sensitive data. Organizations using this plugin should prioritize patching or upgrading to mitigate potential exploitation risks. Given the high severity rating, immediate action is recommended for any systems utilizing affected versions.