CVE-2026-66632 — WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerability

CVE-2026-66632

WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Content Injection vulnerability PUBLISHED

Description (CNA)

Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions.

Vendor / product	Versions
Elliot Sowers/ RelyWP / Simple Cloudflare Turnstile	affected n/a through 1.42.1

CWE-94

CISA-ADP

No English description supplied.

No references supplied.