CVE-2026-66640

The Login With Ajax plugin versions up to 4.5.1 are vulnerable to a Contributor Cross Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts that could execute in the context of a user's session. This vulnerability poses a medium risk, potentially leading to unauthorized actions or data exposure for users with contributor-level access. Website administrators using affected versions should prioritize patching to mitigate the risk of exploitation.