Wp Compress
Approved changes feed: RSS · Atom
cpe:2.3:a:wpcompress:wp_compress:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Wpcompress (16434a98-18dd-568b-b6ea-a653f83888b2) |
|---|---|
| Product | Wp Compress (94248e5f-e06f-5541-a4df-687ed1d55dd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-47546 |
vulnerable | 2026-06-08 07:27:14.540769 |
WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through <= 6.30.30.
Published: 2025-05-07T14:20:17.786Z
Updated: 2026-04-28T16:12:44.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47479 |
vulnerable | 2026-06-08 07:27:14.445233 |
WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability
MEDIUM (5.3)
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through <= 6.30.30.
Published: 2025-07-04T11:18:05.067Z
Updated: 2026-04-28T16:12:42.471Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2110 |
vulnerable | 2026-06-08 07:14:58.034815 |
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
HIGH (8.8)
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to compromise the site in various ways depending on the specific function exploited - for example, by retrieving sensitive settings and configuration details, or by altering and deleting them, thereby disclosing sensitive information, disrupting the plugin’s functionality, and potentially impacting overall site performance.
Published: 2025-03-26T11:22:08.756Z
Updated: 2026-04-08T16:43:43.207Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2109 |
vulnerable | 2026-06-08 07:14:58.034330 |
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
MEDIUM (5.8)
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.30.15 via the init() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query information from internal services.
Published: 2025-03-25T11:12:08.647Z
Updated: 2026-04-08T16:36:06.680Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4445 |
vulnerable | 2026-06-08 06:50:17.775988 |
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization
MEDIUM (6.5)
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the several functions in versions up to, and including, 6.20.01. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to edit plugin settings, including storing cross-site scripting, in multisite environments.
Published: 2024-05-14T05:32:59.624Z
Updated: 2026-04-08T17:04:05.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47384 |
vulnerable | 2026-06-08 06:48:11.890076 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32106 |
vulnerable | 2026-06-08 06:35:32.737853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1934 |
vulnerable | 2026-06-08 06:27:15.074356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12047 |
vulnerable | 2026-06-08 06:23:51.067774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6812 |
vulnerable | 2026-06-08 06:21:55.889770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6699 |
vulnerable | 2026-06-08 06:21:55.323410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.