CVE-2026-123666 | Photo Engine Plugin up to 6.6.1 on WordPress authorization

November 11, 2026 Yanac

A vulnerability classified as problematic has been found in Photo Engine Plugin up to 6.6.1 on WordPress. Affected is an unknown function. The manipulation leads to authorization bypass.

This vulnerability is referenced as CVE-2026-123666. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More