CVE-2026-91049

The EWWW Image Optimizer WordPress plugin versions 8.7.4 through 8.9.0 are vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and restrict a value in post content, which is then used to dynamically load and execute a script. This allows auth...