What’s Vulnerable › Products
aresit WP Compress – Instant Performance & Speed Optimization vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your aresit WP Compress – Instant Performance & Speed Optimization version is affected
Latest aresit WP Compress – Instant Performance & Speed Optimization vulnerabilities
- CVE-2026-104755 — WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint (CVSS 4.8)
- CVE-2026-84757 — WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability (CVSS 8.2)
- CVE-2026-73343 — WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability (CVSS 10.0)
- CVE-2026-17608 — WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion (CVSS 6.5)
- CVE-2026-25370 — WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-57899 — WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability (CVSS 5.3)
- CVE-2025-47479 — WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability (CVSS 9.8)
- CVE-2025-47546 — WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 8.8)
- CVE-2025-2110 — WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions (CVSS 8.8)
- CVE-2025-2109 — WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function (CVSS 5.8)
- CVE-2024-12047 — WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter (CVSS 6.1)
- CVE-2024-47384 — WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-4445 — WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization (CVSS 4.3)
- CVE-2023-6812 — WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css (CVSS 6.1)
- CVE-2024-32106 — WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
- CVE-2024-1934 — WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification (CVSS 7.5)
- CVE-2023-6699 — WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css (CVSS 7.5)