Skip to content
OpenAdvisories

Vendor

aresit

17 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 10.0

    WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

    Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

  • Critical 9.1

    WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css

    The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrar…