Aresit Wp Compress
7 CVEs affecting Aresit Wp Compress. Latest disclosed: 2026-09-03. Critical: 1, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-73343 | Critical | 10.0 | 2026-08-18 | Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. |
CVE-2026-84757 | High | 8.2 | 2026-09-03 | Unauthenticated Settings Change in WP Compress <= 7.21.28 versions. |
CVE-2025-47546 | High | 7.1 | 2025-05-07 | Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compr… |
CVE-2024-47384 | High | 7.1 | 2024-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Ref… |
CVE-2026-25370 | Medium | 5.3 | 2026-02-19 | Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.T… |
CVE-2025-57899 | Medium | 5.3 | 2025-09-22 | Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not Properly Constrained by ACLs.This issu… |
CVE-2025-47479 | Medium | 5.3 | 2025-07-04 | Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a throug… |