Skip to content
OpenAdvisories

Product · aresit

WP Compress – Instant Performance & Speed Optimization

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-2110

    WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

    The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. T…

    aresit WP Compress – Instant Performance & Speed Optimization Web / CMS
  • High 7.5
    CVE-2024-1934

    WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification

    The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wps_local_compress::__construct' function in all versions up to, and including, 6.11.10. This makes it possible…

    aresit WP Compress – Instant Performance & Speed Optimization Web / CMS