CVE-2026-19223 | Smush Plugin up to 4.3.1 on WordPress code injection

August 27, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Smush Plugin up to 4.3.1 on WordPress. This affects an unknown part. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-19223. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More