Security Advisory

CVE-2026-16042

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-02 06:00:11

Last updated 2026-08-02 06:00:11

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds.

← Browse all CVEs View on cve.org ↗