SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-66609

CRITICAL · CVSS 9.3 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-08-20 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

TheGem (Elementor) versions up to 5.12.3 are vulnerable to an unauthenticated SQL injection, allowing attackers to execute arbitrary SQL queries on the database. This critical vulnerability can lead to data exposure, manipulation, or complete system compromise. Organizations using these versions should prioritize immediate patching to mitigate potential exploitation risks.

CVE
CVE-2026-66609
Severity
CRITICAL
CVSS
9.3
EPSS
0.29%

Original NVD Description

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.