CVE

CVE-2026-19223 — Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 4.3.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-19223 Smush – Image Optimization, Compression, Lazy Load, WebP & CDN [wp-smushit] < 4.3.2 Improper Control of Generation of Code ('Code Injection') Unknown < 4.3.2 4.3.2 2026-08-27

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.