Unrated severityNVD Advisory· Published Sep 30, 2026
CVE-2026-89190
CVE-2026-89190
Description
The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer WordPress plugin before 2.0.8's stored settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <2.0.8
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.