Skip to content
Sign in
2.7 Low

CVE-2026-110039 The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network…

Description

The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.

Affected products and versions

Product Affected versions Fixed in
Smush 4.3 earliest → < 4.3.4 4.3.4

Other CVEs of Smush

The 2 CVEs of Smush →
CVE-2026-19223 The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an… 7.2 High
Track this CVE