PT-2026-115475 · Undefined · Undefined

·

CVE-2026-110039

·

Published

2026-10-16

·

Updated

2026-10-16

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-110039

Affected Products

Undefined