CVE-2026-89193

The Robin Image Optimizer WordPress plugin, versions prior to 2.0.8 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to escape values that the plugin's bundled HTML parser re-emits into element attributes when a non-default image delivery mode is enabled. This fl...