AresIT WP Compress vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AresIT WP Compress: 3 record(s), with affected versions and fixes.

CVE-2026-84757 High · 8.2 CWE-862 Sep 3, 2026

WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.

CVE-2026-73343 Critical · 10.0 CWE-94 Aug 18, 2026

WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.

CVE-2026-25370 Medium · 5.3 CWE-862 Feb 19, 2026

WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability

Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress: from n/a through <= 6.60.28.