Veille CVE

Recherche « Unknown Smush »

2 CVE

  1. CVE-2026-110039 2.7 Faible

    Unknown Smush

    The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multisite network to change it for the entire network.

  2. CVE-2026-19223 7.2 Élevée

    Unknown Smush

    The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.