CVE-2026-66588

View on CVE.org
Published Oct 6, 2026 CVSS n/a EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
Title WordPress The7 theme <= 14.2.2 - Broken Access Control vulnerability
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Unauthenticated Broken Access Control in The7 <= 14.2.2 versions. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive.
Type Values Removed Values Added
First Time appeared Dream-theme
Dream-theme the7
Wordpress-extensions
Wordpress-extensions the7
Vendors & Products Dream-theme
Dream-theme the7
Wordpress-extensions
Wordpress-extensions the7
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Unauthenticated Broken Access Control in The7 <= 14.2.2 versions.
Title WordPress The7 theme <= 14.2.2 - Broken Access Control vulnerability
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}
Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
Patchstack
Published
Updated
Oct 13, 2026, 6:09 AM
Reserved
Jul 27, 2026, 2:00 PM

View source JSON

Updated

JSON

Status
Rejected
Published
Oct 6, 2026, 9:17 AM
Modified
Oct 13, 2026, 7:16 AM

View source JSON

No data.

No data.