Elliot Sowers/ Relywp Simple Cloudflare Turnstile vulnerabilities

2 CVEs affecting Elliot Sowers/ Relywp Simple Cloudflare Turnstile, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-66674, published 2026-09-10.

More from Elliot Sowers/ Relywp.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-66632, published 2026-09-10. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthenticated Content Injection in Simple Cloudflare Turnstile <= 1.42.1 versions.
• CVE-2026-66674, published 2026-09-10. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthenticated Bypass Vulnerability in Simple Cloudflare Turnstile <= 1.42.1 versions.