Lucene search
K

16 matches found

ATTACKERKB
ATTACKERKB
added 2026/02/19 8:27 a.m.2 views

CVE-2026-25370

Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress: from n/a through = 6.60.28...

5.5AI score0.00042EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-30730

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.00063EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2025-13790

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00089EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-19979

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00176EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/24 6:31 p.m.0 views

CVE-2025-57899

Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Compress: from n/a through = 6.50.54...

5.3CVSS5.9AI score0.00063EPSS
Exploits0References1
CVE
CVE
added 2025/09/22 6:25 p.m.5 views

CVE-2025-57899

CVE-2025-57899 (WP Compress) : A missing-authorization flaw in WP Compress (WordPress plugin, affected through 6.50.54) allows accessing functionality not properly constrained by ACLs. Impact is access-level bypass for certain features; CVSS 3.1 base score 5.3 (Medium). The issue is listed as Pat...

5.3CVSS5.9AI score0.00063EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/22 12:0 a.m.2 views

PT-2025-39009

Name of the Vulnerable Software and Affected Versions WP Compress versions through 6.50.54 Description A missing authorization issue exists in AresIT WP Compress, allowing access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update WP Compress to ...

5.3CVSS6.6AI score0.00063EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/07/06 11:22 a.m.4 views

CVE-2025-47479

Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...

9.8CVSS5.9AI score0.00176EPSS
Exploits0References1
NVD
NVD
added 2025/07/04 12:15 p.m.4 views

CVE-2025-47479

Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...

9.8CVSS0.00176EPSS
Exploits0References1
OSV
OSV
added 2025/07/04 12:15 p.m.2 views

CVE-2025-47479

Weak Authentication vulnerability in AresIT WP Compress allows Authentication Abuse. This issue affects WP Compress: from n/a through 6.30.30...

9.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/07/04 11:18 a.m.16 views

CVE-2025-47479

CVE-2025-47479 describes a broken/broken authentication vulnerability in WordPress WP Compress (WP Compress – Instant Performance & Speed Optimization) affecting versions up to 6.30.30. Exploitation would allow authentication abuse due to weak authentication mechanisms. A fix is available; upgrad...

9.8CVSS5.9AI score0.00176EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/05/07 3:16 p.m.2 views

CVE-2025-47546

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress allows Cross Site Request Forgery. This issue affects WP Compress: from n/a through 6.30.30...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.5 views

CVE-2025-47546

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...

8.8CVSS0.00089EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/05/07 2:20 p.m.13 views

CVE-2025-47546 WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...

7.1CVSS0.00089EPSS
Exploits0References1
CVE
CVE
added 2025/05/07 2:20 p.m.41 views

CVE-2025-47546

CVE-2025-47546: CSRF in WordPress WP Compress

8.8CVSS7.2AI score0.00089EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/07 12:0 a.m.1 views

PT-2025-20159 · Unknown · Aresit Wp Compress

Name of the Vulnerable Software and Affected Versions: AresIT WP Compress versions n/a through 6.30.30 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a through...

8.8CVSS8.9AI score0.00089EPSS
Exploits0References4
Rows per page
Query Builder