CVE-2026-91051

The EWWW Image Optimizer WordPress plugin versions before 8.8.0 is vulnerable to PHP Object Injection . Authenticated users with author-level permissions can store a serialized value in a post meta field, which is subsequently deserialized during post rendering. This flaw can lead to remote code ...