What is CVE-2023-6812?

CVE-2023-6812 is a medium-severity vulnerability in Aresit Wp Compress – Instant Performance & Speed Optimization, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 4.3/10. Published 2024-05-14.

How severe is CVE-2023-6812?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Open Redirect in Aresit Wp Compress – Instant Performance & Speed Optimization

CVE-2023-6812

The WP Compress – Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.20.01. This is due to insufficient validation on the redirect url supplied via the 'css' parameter. T…

Vulnerability class: Open Redirect

EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Aresit Wp Compress – Instant Performance & Speed Optimization — versions 0
Wpcompress Wp_compress

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

security@wordfence.com (Third Party Advisory)
security@wordfence.com (Patch)

Frequently asked questions

What is CVE-2023-6812?: CVE-2023-6812 is a medium-severity vulnerability in Aresit Wp Compress – Instant Performance & Speed Optimization, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 4.3/10. Published 2024-05-14.
How severe is CVE-2023-6812?: Medium severity. CVSS v3 base score is 4.3 out of 10.