2.7
Faible
CVE-2026-110039 The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network…
Description
The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Smush 4.3 | premières → < 4.3.4 | 4.3.4 |