CVE-2026-66594

A SQL injection vulnerability exists in the Persistent Login feature of WordPress versions up to 3.1.0, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive information. This high-severity flaw poses a significant risk to websites utilizing affected versions, particularly those with subscriber-level accounts. WordPress administrators and security teams should prioritize patching or upgrading to mitigate the risk of exploitation.