{"id":"CVE-2026-89190","published":"2026-09-30T06:17:08.280","lastModified":"2026-09-30T06:17:08.280","description":"The Robin Image Optimizer  WordPress plugin before 2.0.8 does not check the user's capabilities before dispatching one of its bundled admin framework's request handlers, allowing users with a subscriber-level account to render admin-only Robin Image Optimizer  WordPress plugin before 2.0.8 pages and disclose the Robin Image Optimizer  WordPress plugin before 2.0.8's stored settings.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/570e6bfb-cfe9-4a6f-8759-c6e99e19e272/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}