WP Compress vulnerabilities

2 known vulnerabilities in WP Compress from AresIT. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WP Compress: Weak Authentication

  CVE-2025-47479Jul 4, 2025AresIT

  Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through <= 6.30.30.

• 8.8 High severity

  WP Compress: Cross-Site Request Forgery

  CVE-2025-47546May 7, 2025AresIT

  Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through <= 6.30.30.