Advisories · Technology

AresIT WP Compress.

Every CVE that names AresIT WP Compress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84757 CVE record

CVSS 8.2 High

WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability
- AresIT WP Compress
- Broken access control
Not analysed yet 3 Sept 2026
CVE-2026-73343 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability
- AresIT WP Compress
- Code injection
Not analysed yet 18 Aug 2026
CVE-2026-25370 CVE record

CVSS 5.3 Medium

WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability
- AresIT WP Compress
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-57899 CVE record

CVSS 5.3 Medium

WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability
- AresIT WP Compress
- Broken access control
Not analysed yet 22 Sept 2025
CVE-2025-47479 CVE record

CVSS 5.3 Medium

WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability
- AresIT WP Compress
- Authentication bypass
Not analysed yet 4 Jul 2025
CVE-2025-47546 CVE record

CVSS 7.1 High

WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
- AresIT WP Compress
- Cross-site request forgery (CSRF)
Not analysed yet 7 May 2025
CVE-2024-47384 CVE record

CVSS 7.1 High

WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability
- AresIT WP Compress
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024