Broken Access Control in Optimole Plugin Affects WordPress Users
CVE-2026-102375

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Optimole
Vendor
CVE Published:
30 September 2026

What is CVE-2026-102375?

The Optimole plugin for WordPress has a vulnerability that allows unauthenticated users to access restricted features due to broken access control mechanisms. Versions less than 4.2.14 are affected, which could lead to unauthorized access and potential data leakage. It is crucial for site owners using this plugin to update to the latest version to ensure the security of their sites.

Affected Version(s)

Optimole <= 4.2.14

References

https://patchstack.com/database/wordpress/plugin/optimole...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dthangws | Patchstack Bug Bounty Program
.