Live › vulnerability › CVE-2026-112826
Go to dashboardThe Falcon WordPress optimization plugin from eLightUp is missing an authorization check in at least one function. Per the description, an attacker can exploit incorrectly configured access control levels to perform actions they should not be allowed to.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Falcon – WordPress Optimizations & Tweaks plugin at version or earlier. The sources do not say which access control configuration is required to trigger it, so treat any site with the plugin installed as potentially exposed. Sites that have removed the plugin are not affected.
2.12.0No product ranges from the sources yet.
2.12.02.12.0 once the vendor publishes oneEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-112826")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.