Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%
Buy Us a Coffee

WP Compress – Instant Performance & Speed Optimization — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in WP Compress – Instant Performance & Speed Optimization, with AI-generated Chinese analysis, references, and POCs.

Vendor: aresit

CVE IDTitleCVSSSeverityPublished
CVE-2025-2110 WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions CWE-862 8.8 High2025-03-26
CVE-2025-2109 WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function CWE-918 5.8 Medium2025-03-25
CVE-2024-12047 WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter CWE-79 6.1 Medium2025-01-04
CVE-2024-4445 WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization CWE-862 6.5 Medium2024-05-14
CVE-2023-6812 WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css CWE-601 4.3 Medium2024-05-14
CVE-2024-1934 WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification CWE-862 7.5 High2024-04-09
CVE-2023-6699 WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css CWE-24 9.1 Critical2024-01-11

All 7 known CVE vulnerabilities affecting WP Compress – Instant Performance & Speed Optimization with full Chinese analysis, references, and POCs where available.