Vulnerability in Lws Optimize
CVE-2026-16032
The LWS Optimize WordPress plugin before 4.1.2 does not properly escape a value submitted through an unauthenticated analytics endpoint before storing it and rendering it in an administrative dashboard, allowing unauthenticated attackers…
Affected products
- Unknown Lws Optimize — versions 0
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)