CVE-2026-66686

The vulnerability allows unauthenticated attackers to exploit Cross Site Request Forgery (CSRF) in the Plugins Garbage Collector (Database Cleanup) versions up to 0.14, potentially leading to unauthorized actions being performed on behalf of legitimate users. Organizations utilizing this plugin should prioritize remediation to mitigate the risk of unauthorized data manipulation or service disruption.