WP Compress Wp Compress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs

WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability

Published 2025-07-04 · Modified

9.8EPSS 0.004

WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css

Published 2024-01-11 · Modified

9.1EPSS 0.009

WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

Published 2025-03-26 · Analyzed

8.8EPSS 0.004

WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability

Published 2024-04-11 · Modified

8.8EPSS 0.002

WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Published 2025-05-07 · Modified

8.8EPSS 0.002

WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification

Published 2024-04-09 · Modified

7.5EPSS 0.007

WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability

Published 2024-10-05 · Modified

7.1EPSS 0.003

WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization

Published 2024-05-14 · Modified

6.5EPSS 0.003

WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css

Published 2024-05-14 · Modified

6.1EPSS 0.004

WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter

Published 2025-01-04 · Analyzed

6.1EPSS 0.004

WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function

Published 2025-03-25 · Analyzed

5.8EPSS 0.004