Log in Start free

AresIT

Products

ProductCVEsExploitedLatest
WP Compress – Instant Performance & Speed Optimization10–Nov 3, 2026
WP Compress7–Sep 3, 2026

Exploited and recent CVEs

  • CVE-2026-120551 Medium 5.3 WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters 0.2%
  • CVE-2026-104755 Medium 4.8 WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint 0.3%
  • CVE-2026-84757 High 8.2 WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability 0.4%
  • CVE-2026-73343 Critical 10.0 WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability 0.9%
  • CVE-2026-17608 Medium 6.5 WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion 0.2%
  • CVE-2026-25370 Medium 5.3 WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability 0.3%
  • CVE-2025-57899 Medium 5.3 WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability 0.5%
  • CVE-2025-47479 Medium 5.3 WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability 0.4%
  • CVE-2025-47546 High 7.1 WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-2110 High 8.8 WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions 0.5%
  • CVE-2025-2109 Medium 5.8 WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function 0.4%
  • CVE-2024-12047 Medium 6.1 WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter 0.4%
  • CVE-2024-47384 High 7.1 WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-4445 Medium 6.5 WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization 0.3%
  • CVE-2023-6812 Medium 4.3 WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css 0.4%
  • CVE-2024-1934 High 7.5 WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification 0.7%
  • CVE-2023-6699 Critical 9.1 WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css 0.9%