CVE-2026-66640: Marcus Aka @msykes Login With AJAX

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

Affected products

• Marcus Aka @msykes Login With AJAX: up to and including 4.5.1

Published 2026-08-18. Last modified 2026-08-20.