High · 8.5 CVE-2026-66594 EUVD-2026-63337GHSA-994g-fvfg-cwf4

WordPress WordPress Persistent Login plugin <= 3.1.0 - SQL Injection vulnerability

Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack

Vendor: lukeseager Product: WordPress Persistent Login Category: Web / CMS

Description

Subscriber SQL Injection in WordPress Persistent Login <= 3.1.0 versions.

Affected products

Vendor	Product	Affected	Fixed
lukeseager	WordPress Persistent Login	≤ 3.1.0	—

References

https://patchstack.com/database/wordpress/plugin/wp-persistent-login/vulnerability/wordpress-wordpress-persistent-login-plugin-3-1-0-sql-injection-vulnerability?_s_id=cve vdb-entry