Administrator SQL Injection in WPMasterToolKit <= 2.22.0 versions.
CVE-2026-66624 at the National Vulnerability Database