UNKNOWN NVD

CVE-2026-110039

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a si

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.

References

https://wpscan.com/vulnerability/4f27b2fd-1b27-4274-85c5-f19e6998aa44/

Published: 2026-10-16 · Source: NVD · Feed updated: 2026-10-16

This unknown severity vulnerability was published on 2026-10-16 via NVD.

vulnfeed aggregates 14996 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.