Skip to content
Sign in
4.3 Medium

CVE-2026-16042 The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions,…

Description

The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds.

Affected products and versions

Product Affected versions Fixed in
LWS Optimize 3.4 earliest → < 3.4 3.4

Other CVEs of LWS Optimize

The 2 CVEs of LWS Optimize →
CVE-2026-16032 The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated… 6.1 Medium
Track this CVE