株式会社mgn@mgn_jpn
🛠 Speed Optimizer の脆弱性が修正されました（深刻度 低） 100万サイト以上が利用 / CVSS 2.7 7.8.5 に更新してください https://shindan.m-g-n.me/alerts/cve-2026-111738/
00010244
466 followersView on X
CVE-2026-111738
LOWCVSS 5.5 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which option may be changed, allowing a site administrator who is not a Super Admin to create or overwrite network-wide options.
0.0/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-863
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Deep dive
Activity timeline1 mentions / 1d
Referenced assets1 URL
By indicator