WP Compress – Instant Performance & Speed Optimization vulnerabilities
3 known vulnerabilities in WP Compress – Instant Performance & Speed Optimization from AresIT. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. Th
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wps_local_compress::__construct' function in all versions up to, and including, 6.11.10. This makes it possible
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Improper Limitation of a Pathname to a Restricted Directory
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary