CVE-2026-66481: WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability
Published Oct 10, 2026
·Updated
Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions.
Affected Software
1 affected component
Presto Player Presto Player Pro<=3.0.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Presto Player Pro pluginto a version that resolves this vulnerability.Fixed in 3.0.2
Event History
Oct 10, 2026
CVE Published
via MITRE·07:36 PM
Data Sourced
via MITRE·07:36 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
Presto Player Pro versions 3.0.1 and earlier are identified as affected.
2
What level of access does an attacker need?
Exploitation requires Author-level access, as indicated by the vulnerability classification. The reported vector is network-accessible and does not require user interaction.