Platform All capabilities Keep threats out Seawall: Network Protection Fairway: Connectivity & Traffic Priority Lookout: Threat Intelligence Know and harden your estate Deckhand: Endpoint Protection Quartermaster: Asset & Software Inventory Radar: Vulnerability Management Stay in control Safe Harbor: Backup & Recovery Helm: Identity & Access Gangway: Secure Remote Access Respond and prove it Logbook: Investigation & Incident Response Muster: Training, Drills & Awareness Chandler: Supplier & Third-Party Risk Bridge: Central Command & Evidence Hardware & more Network appliances Order routers Portal showcase How it works Plans Compare plans Essentials Custom Complete Who it's for Maritime & offshore Industry & energy No IT team You have an IT team Services NIS2 & maritime compliance Penetration testing Threat intelligence Vulnerability reporter Free tools IP address lookup Vulnerability lookup Malware hash lookup Free malware scan User agent lookup Regulatory clock Report Report a suspicious event
Contact us
Free tools · Vulnerability lookup

WordPress 7.1.2 vulnerabilities

WordPress 7.1.2 has 1 known vulnerability. Each one is ranked by real-world exploitation and severity, with the version that fixes it where one is known. Free, no account.

Free tier: 5 lookups per day, per IP. Need continuous estate-wide coverage? See the service.

Every checked version of WordPress

An ecosystem (Debian:12, npm, PyPI, …) enables precise version-aware matching. Leave it blank for Windows / commercial software.

Cross-referencing the vulnerability databases…

Vulnerability report · checked 2026-10-12

WordPress 7.1.2

no ecosystem · NVD keyword / CPE match
1
known vulnerability
1 medium
medium CVE-2026-66666 CVSS 6.9

Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1.2, from 7.0 through 7.0.6, from 6.9 through 6.9.9, from 6.8 through 6.8.10, from 6.7 through 6.7.9, and from 6.6 through 6.6.9.

EPSS 0.3% · p20 CWE-201 published 2026-10-06

Discovery: OSV.dev, NVD and Red Hat (MITRE-refined). Prioritisation: CISA KEV & EPSS. Findings are best-effort from public sources and are not a substitute for vendor advisories.

Not sure what to type? Start from the product

The software directory has a page for 1000 widely used products, from operating systems and firewalls to the npm and Python packages inside your applications, each with the versions already checked and the advisories they turned up.

Browse the directory

Scanning a whole estate?

Our Vulnerability Reporter service inventories your software and reports continuously.

Explore the service