Detections
Analytics
CVE-2026-89190
medium
Description
The Robin Image Optimizer WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer WordPress plugin before 2.0.8's stored settings.
References
https://wpscan.com/vulnerability/570e6bfb-cfe9-4a6f-8759-c6e99e19e272/