CVE-2026-66632

Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions.

Published Sep 10, 2026
CVSS 6.5 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Elliot Sowers/ RelyWP Simple Cloudflare Turnstile

CVE-2026-66632 at the National Vulnerability Database