Medium
42d4ec8b-d3ed-4aa3-a8b9-cddaf64a7531
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-84757
WP Compress – Instant Performance & Speed Optimization <= 7.21.28 - Missing Authorization to Unauthenticated Settings Update
Critical
CVE-2026-73343
WP Compress – Instant Performance & Speed Optimization < 7.20.01 - Unauthenticated Remote Code Execution
Medium
CVE-2026-17608
WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion
Medium
CVE-2026-9066
Compress <= 7.10.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-25370
Compress <= 6.60.28 - Missing Authorization
Medium
CVE-2025-57899
WP Compress <= 6.50.54 - Missing Authorization
High
CVE-2025-47479
WP Compress <= 6.30.30 - Unauthenticated Broken Authentication
Medium
CVE-2025-47546
WP Compress <= 6.30.30 - Cross-Site Request Forgery
High
CVE-2025-2110
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
Medium
CVE-2025-2109
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
Medium
CVE-2024-12047
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
Medium
CVE-2024-47384
WP Compress – Image Optimizer [All-In-One] <= 6.20.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-6812
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css
Medium
CVE-2024-4445
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization
Medium
CVE-2024-32106
WP Compress – Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery
High
CVE-2024-1934
WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
Critical
CVE-2023-6699
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.