CVE-2026-66666 WordPress Core <= 7.1.2 - Unauthenticated Sensitive Data Exposure of Comments on Private and Unpublished Posts via Comment Feed vulnerability

[
  {
    "vendor": "Automattic",
    "product": "WordPress",
    "versions": [
      {
        "status": "affected",
        "version": "7.1",
        "lessThanOrEqual": "7.1.2",
        "changes": [
          {
            "at": "7.1.3",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.0",
        "lessThanOrEqual": "7.0.6",
        "changes": [
          {
            "at": "7.0.7",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.9",
        "lessThanOrEqual": "6.9.9",
        "changes": [
          {
            "at": "6.9.10",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.8",
        "lessThanOrEqual": "6.8.10",
        "changes": [
          {
            "at": "6.8.11",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.7",
        "lessThanOrEqual": "6.7.9",
        "changes": [
          {
            "at": "6.7.10",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.6",
        "lessThanOrEqual": "6.6.9",
        "changes": [
          {
            "at": "6.6.10",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]