CVE-2026-89190

Published: Set 30, 2026 Last Modified: Set 30, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer WordPress plugin before 2.0.8's stored settings.

https://wpscan.com/vulnerability/570e6bfb-cfe9-4a6f-8759-c6…
https://wpscan.com/vulnerability/570e6bfb-cfe9-4a6f-8759-c6e99e19e272/