What’s Vulnerable › Products

Smush vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Smush version is affected

Latest Smush vulnerabilities

• CVE-2026-110039 — Smush < 4.3.4 - Admin+ Network-Wide Plugin Settings Update on Multisite (CVSS 2.7)
• CVE-2026-19223 — Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite (CVSS 7.2)