CVE-2026-66685
Received Received - Intake

Unauthenticated Sensitive Data Exposure in Featured Video Plus

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: Patchstack

Description
Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-66685
EUVD
EUVD-2026-53896

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
patchstack featured_video_plus to 2.3.3 (inc)
patchstack featured_video_plus to 2.3.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-201 The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-66685 is an unauthenticated sensitive data exposure vulnerability in the WordPress Featured Video Plus plugin versions 2.3.3 and below. It allows attackers to access sensitive information without authentication, potentially leading to further exploitation.

Detection Guidance

Check if the Featured Video Plus plugin version 2.3.3 or below is installed on your WordPress site. Inspect network traffic for unauthorized access to sensitive data endpoints.

Impact Analysis

This vulnerability could enable malicious actors to access restricted sensitive data, which might be used to exploit other system weaknesses. While the threat is low severity, attackers may still target websites in mass-exploit campaigns.

Mitigation Strategies

Update the Featured Video Plus plugin to the latest version if available. If no patch exists, disable the plugin immediately and consult your hosting provider or web developer for alternatives.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66685. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart