CVE-2026-19223

CVE-2026-19223 affects the Smush WordPress plugin versions prior to 4.3.2 . The root cause is a missing authorization check: a network-wide setting is not restricted to network administrators. This means an administrator of any single site within a WordPress multisite network can execute arbitrar...