medium4.3
CVE-2026-89190
The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request …
Impact
The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer WordPress plugin before 2.0.8's stored settings.
Affected products
| Product | Affected versions |
|---|---|
| Robin Image Optimizer WordPress Plugin | before 2.0.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.