CVE-2026-66674

Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions.

Published Sep 10, 2026
CVSS 5.6 medium
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

Elliot Sowers/ RelyWP Simple Cloudflare Turnstile

CVE-2026-66674 at the National Vulnerability Database