Advisories · Technology
aresit WP Compress – Instant Performance & Speed Optimization.
Every CVE that names aresit WP Compress – Instant Performance & Speed Optimization among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters
- aresit WP Compress – Instant Performance & Speed Optimization
- Broken access control
- CVSS 4.8 Medium
WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint
- aresit WP Compress – Instant Performance & Speed Optimization
- Privilege escalation
- CVSS 6.5 Medium
WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion
- aresit WP Compress – Instant Performance & Speed Optimization
- Cross-site request forgery (CSRF)
- CVSS 8.8 High
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
- aresit WP Compress – Instant Performance & Speed Optimization
- Broken access control
- CVSS 5.8 Medium
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
- aresit WP Compress – Instant Performance & Speed Optimization
- Server-side request forgery (SSRF)
- CVSS 6.1 Medium
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
- aresit WP Compress – Instant Performance & Speed Optimization
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization
- aresit WP Compress – Instant Performance & Speed Optimization
- Broken access control
- CVSS 4.3 Medium
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css
- aresit WP Compress – Instant Performance & Speed Optimization
- Open redirect
- CVSS 7.5 High
WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
- aresit WP Compress – Instant Performance & Speed Optimization
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
- aresit WP Compress – Instant Performance & Speed Optimization
- Path traversal