{"id":"CVE-2026-111738","published":"2026-10-23T06:17:05.897","lastModified":"2026-10-23T14:20:57.920","description":"The Speed Optimizer  WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://wpscan.com/vulnerability/e08044dc-c514-4e4a-bf3e-995dd2ad29b1/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}