CVE-2026-59531

HighCVSS 7.5

Published: 27/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

39th percentile - higher than 39% of all known CVEs

Summary

The Falcon – WordPress Optimizations & Tweaks plugin in version 2.10.0 and earlier has an unknown vulnerability exploitable by an unauthenticated user. No detailed information is available.

Risk Assessment

Unauthorized users may exploit this vulnerability for unknown actions, posing a risk to site optimization and security.

Recommendation

Update the Falcon plugin to a version higher than 2.10.0 that fixes this vulnerability.

Other vulnerabilities in Falcon – WordPress Optimizations & Tweaks

CVE-2026-112826Medium
The Falcon – WordPress Optimizations & Tweaks plugin by eLightUp, versions up to 2.12.0, contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks <= 2.10.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS