CVE

CVE-2026-118241 — Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 4.3.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-118241 Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 4.3.6 Authorization Bypass Through User-Controlled Key Unknown < 4.3.6 4.3.6 2026-11-06 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.