CVE-2026-66686

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-66686
Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/wordpress/plugin/plugins-garbage-collector/vulnerability/wordpress-plugins-garbage-collector-database-cleanup-plugin-0-14-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
Configurations

No configuration.

History

23 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Falsificación de Solicitudes entre Sitios (CSRF) no autenticada en Plugins Garbage Collector (Limpieza de Base de Datos) versiones menor o igual que 0.14.
Information

Published : 2026-08-06 15:17

Updated : 2026-10-24 16:10

NVD link : CVE-2026-66686

Mitre link : CVE-2026-66686

CVE.ORG link : CVE-2026-66686

JSON object : View

Products Affected

No product.

CWE
CWE-352

Cross-Site Request Forgery (CSRF)