CVE-2026-66665General

LOWCVSS 10.0 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/wordpress/plugin/typehub/vulnerability/wordpress-type-hub-plugin-2-0-6-arbitrary-file-upload-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-08-07); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

General

133.3%

PoC

133.3%

Patch

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-08-07	2	General1PoC1
2026-08-12	1	Patch1

Full discourse3 posts

ExploitGrid@exploitgrid46d
General
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-11976 CVE-2026-14812 CVE-2026-5430 CVE-2026-65553 CVE-2026-66665 ..🧵👇
Post summary
A short digest lists several CVEs without providing further technical details, exploitation information, or remediation advice.
1001054
29 followersView on X
ExploitGrid@exploitgrid46d
PoC
[CVE] CVE-2026-66665 [HIGH PRIORITY] #WordPress Type Hub plugin <= 2.0.6 - Arbitrary File Upload vulnerability 🔗 https://exploitgrid.net/cve/CVE-2026-66665
Post summary
The post announces the discovery of CVE-2026-66665, an arbitrary file upload flaw in WordPress Type Hub plugin, and provides a link that likely hosts PoC or exploit details, but no exploit code or active exploitation is detailed.
1000040
29 followersView on X
SecAlerts@SecAlertsCo41d
Patch
📁 Unauthenticated file upload in WordPress Type Hub plugin <= 2.0.6. CVSS 10 — no auth needed to drop malicious files. CVE-2026-66665 Update immediately. #cybersecurity #wordpress #vulnerabilities #ciso #mssp https://secalerts.co/vulnerability/CVE-2026-66665?utm_campaign=x https://t.co/yvgXjP1mHf
Post summary
The tweet announces a serious unauthenticated file upload flaw in a WordPress plugin and urges users to apply an update.
00000213
878 followersView on X

Explore more

Back to dashboard