Wpcompress vulnerabilities
We track 4 vulnerabilities in Wpcompress products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2025.
Latest Wpcompress vulnerabilities
- 8.8 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. Th
- 8.8 High severity
WP Compress – Image Optimizer [All-In-One]: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in WP Compress WP Compress – Image Optimizer [All-In-One].This issue affects WP Compress – Image Optimizer [All-In-One]: from n/a through 6.10.35.
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Missing Authorization
The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wps_local_compress::__construct' function in all versions up to, and including, 6.11.10. This makes it possible
- 7.5 High severity
WP Compress – Instant Performance & Speed…: Improper Limitation of a Pathname to a Restricted Directory
The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.10.33 via the css parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary