medium6.5
CVE-2026-96530
The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widge…
Impact
The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any authenticated user, including Subscribers, to read the site's third-party service credentials.
Affected products
| Product | Affected versions |
|---|---|
| Optimole WordPress Plugin | before 4.2.15 |
Versions were read from the advisory text. No structured product data has been published for this record yet.