WordPress Plugin Vulnerabilities
Smush < 4.3.0 - Unauthenticated Denial of Service
Description
The plugin is vulnerable to Denial of Service due to insufficient validation of user supplied input. This makes it possible for unauthenticated attackers to make the affected site unavailable.
Affects Plugins
Fixed in 4.3.0 References
Miscellaneous
Original Researcher
Asim Alshaya
Verified
No
WPVDB ID
Timeline
Publicly Published
2026-08-27 (about 1 month ago)
Added
2026-09-02 (about 1 month ago)
Last Updated
2026-09-02 (about 1 month ago)
