CVE-2026-110039

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network...

CVE-2026-110039

The Smush WordPress plugin (versions before 4.3.4 ) contains an incorrect authorization vulnerability (CWE-863). The plugin fails to restrict changes to network-wide access settings to only network administrators. Consequently, an administrator of a single site within a WordPress Multisite networ...

CVE-2026-110039 Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network...

EUVD-2026-102695

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network...

WordPress Smush plugin < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite vulnerability

Admin+ Network-Wide Plugin Settings Update on Multisite vulnerability discovered by Erwan LR WPScan in WordPress Plugin Smush Image Compression and Optimization versions 4.3.4...

CVE-2026-81285

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

CVE-2026-81285

Smush Image Compression and Optimization is a WordPress plugin affected by an unauthenticated Denial of Service vulnerability in versions ≤ 4.2.0 . The flaw allows a remote, unauthenticated attacker to trigger a denial of service over the network with low complexity and no user interaction requir...

CVE-2026-81285 WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

EUVD-2026-67728

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

PT-2026-83146

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

CVE-2026-81285: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization = 4.2.0 versions...

WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Asim Alshaya in WordPress Plugin Smush Image Compression and Optimization versions = 4.2.0...

CVE-2026-19223

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

EUVD-2026-66873

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2026-19223 Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2026-19223

The Smush WordPress plugin (versions before 4.3.2 ) contains a vulnerability where it fails to restrict a network-wide setting to network administrators. This flaw allows an administrator of any single site within a multisite network to execute arbitrary code across the entire network. The root c...

CVE-2026-19223 Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

WordPress Smush plugin < 4.3.2 - Admin+ Network-Wide RCE vulnerability

Admin+ Network-Wide RCE vulnerability discovered by Jakub Herman in WordPress Plugin Smush Image Compression and Optimization versions 4.3.2...

PT-2026-82389

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...

CVE-2026-19223: Improper Control of Generation of Code

The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network...