CVE-2026-90953 in Image Optimizer Plugininfo

Zusammenfassung

von MITRE • 30.09.2026

The Image Optimizer WordPress plugin before 1.7.7 does not enforce its intended capability check on several of its read REST routes, allowing any authenticated user to read attachment metadata and site-wide statistics that should be restricted to administrators.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

Veröffentlichung

30.09.2026

Moderieren

akzeptiert

Eintrag

VDB-411880

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-90953
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-90953
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-90953/

◂ ZurückÜbersichtWeiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!