CVE-2026-66665

CRITICAL

WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-66665 has a selected CVSS score of 10.0 (critical).

Description

Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 5, 2026 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Aug 6, 2026 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Type Hub

Browse Brandexponents / Type Hub

Default status: unaffected

CVE ListThrough 2.0.6affected

Type Hub

Browse Brandexponents / Type Hub
VulnCheckVersion data not supplied

References

2