CVE-2026-110029

Squeeze < 1.8.1 - Subscriber+ Missing Authorization via squeeze_restore_attachment

The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert any attachment to its backup copy and to permanently delete that backup and the plugin's generated WebP derivatives, regardless of ownership.

Affected

Squeeze

CVSS v3.1 WPScan

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS

0.23% chance of exploitation in the next 30 days, 13th percentile

Published

2026-10-16

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/be39621f-99f3-489f-aa54-f96ca92e167a/

References

• CVE Record
• NVD entry