CVE Catalog

CVE-2026-81285

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Unauthenticated Denial of Service (DoS) attack in the Smush Image Compression and Optimization plugin in versions up to and including 4.2.0.

Risk Assessment

An attacker can cause service unavailability, potentially disrupting website operations and affecting user access.

Recommendation

Update the Smush plugin to a version newer than 4.2.0 that contains the fix for this vulnerability.

Other vulnerabilities in Smush

Original NVD description (English source)

Unauthenticated Denial of Service Attack in Smush Image Compression and Optimization <= 4.2.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS