CVE-2026-16042
LWS Optimize < 3.4 - Subscriber+ Cache Deletion
CVSS Score
4.3
EPSS Score
0.1%
EPSS Percentile
3th
The LWS Optimize WordPress plugin before 3.4 does not perform a capability check on its cache-clearing actions, allowing any authenticated user, including Subscribers, to flush the site's caches and force repeated cache rebuilds.
| Vendor | unknown |
| Product | lws optimize |
| Published | Aug 2, 2026 |
| Last Updated | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown lws optimize
Be the first to know when new medium vulnerabilities affecting unknown lws optimize are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / LWS Optimize
0 < 3.4
References
Credits
Omar Elshopky WPScan