MEDIUM 4.3 NVD

CVE-2026-89190

The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request

The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer WordPress plugin before 2.0.8's stored settings.

References

https://wpscan.com/vulnerability/570e6bfb-cfe9-4a6f-8759-c6e99e19e272/

Published: 2026-09-30 · Source: NVD · Feed updated: 2026-09-30

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-09-30 via NVD.

vulnfeed aggregates 9449 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.