CVE-2026-66640

Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

Credits

Ananda Dhakal (Patchstack) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/login-with-ajax/vulnerability/wordpress-login-with-ajax-plugin-4-5-1-cross-site-scripting-xss-vulnerability?_s_id=cve