CVE-2025-30932

CVE-2025-30932 concerns WP Compress for MainWP with Missing Authorization due to misconfigured access controls. Affected versions range up to 6.30.32; Wordfence notes the issue has been patched. No exploit details are provided in the sources; no additional vectors or mitigations are specified bey...

CVE-2025-30932 WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through = 6.30.32...

PT-2025-24160 · Mainwp · Wp Compress

Name of the Vulnerable Software and Affected Versions: WP Compress for MainWP versions through 6.30.32 Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions through...

CVE-2024-32106

Cross-Site Request Forgery CSRF vulnerability in WP Compress WP Compress – Image Optimizer All-In-One.This issue affects WP Compress – Image Optimizer All-In-One: from n/a through 6.10.35...

CVE-2024-12047

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘customserver’ parameter in all versions up to, and including, 6.30.03 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2023-6812

The WP Compress – Image Optimizer All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 6.20.01. This is due to insufficient validation on the redirect url supplied via the 'css' parameter. This makes it possible for unauthenticated attackers to...

CVE-2025-47546

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...

CVE-2025-47546

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress allows Cross Site Request Forgery. This issue affects WP Compress: from n/a through 6.30.30...

CVE-2025-47546

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...

CVE-2025-47546 WordPress WP Compress <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress allows Cross Site Request Forgery. This issue affects WP Compress: from n/a through 6.30.30...

CVE-2025-47546 WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...

CVE-2025-47546

CVE-2025-47546: CSRF in WordPress WP Compress

PT-2025-20159 · Unknown · Aresit Wp Compress

Name of the Vulnerable Software and Affected Versions: AresIT WP Compress versions n/a through 6.30.30 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a through...

WordPress plugin WP Compress 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-31076

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...

CVE-2025-2110

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to missing capability checks on its on its AJAX functions in all versions up to, and including, 6.30.15. This makes it possible for authenticate...

CVE-2025-31076

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...

CVE-2025-31076 WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Server Side Request Forgery.This issue affects WP Compress for MainWP: from n/a through = 6.30.03...

CVE-2025-31076 WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in WP Compress WP Compress for MainWP allows Server Side Request Forgery. This issue affects WP Compress for MainWP: from n/a through 6.30.03...

CVE-2025-31076

CVE-2025-31076: WordPress WP Compress for MainWP contains an SSRF vulnerability (Authenticated, Subscriber+). Affected version range: up to 6.30.03. Attack vector and specific endpoint details are not provided in the documents, but the issue is classified as Server-Side Request Forgery with a CVS...