AresIT vulnerabilities
We track 5 vulnerabilities in AresIT products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2025.
Latest AresIT vulnerabilities
- 9.8 Critical severity
WP Compress: Weak Authentication
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through <= 6.30.30.
- 8.8 High severity
WP Compress: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through <= 6.30.30.
- 8.8 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. Th
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wps_local_compress::__construct' function in all versions up to, and including, 6.11.10. This makes it possible
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Improper Limitation of a Pathname to a Restricted Directory
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary