Smush vulnerabilities
We track 1 vulnerability in Smush products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Smush vulnerabilities
- 7.2 High severity
Smush: Improper Control of Generation of Code
The Smush WordPress plugin before 4.3.2 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on a multisite network to execute arbitrary code across the entire network.