CVE-2026-118784 | john-dagelmore WPSpeed Plugin up to 2.6.10 on WordPress LightImages HTML optimizer optimize nickname/display_name HTML injection (EUVD-2026-119035)

SecurityVulns
Yanac

A vulnerability labeled as problematic has been found in john-dagelmore WPSpeed Plugin up to 2.6.10 on WordPress. This vulnerability affects the function Dispatcher::runOptimize/LightImages::optimize of the component LightImages HTML optimizer. Such manipulation of the argument nickname/display_name leads to HTML injection.

This vulnerability is uniquely identified as CVE-2026-118784. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More