16 matches found
CVE-2026-25370
Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress: from n/a through = 6.60.28...
EUVD-2025-30730
Malicious code in bioql PyPI...
EUVD-2025-13790
Malicious code in bioql PyPI...
EUVD-2025-19979
Malicious code in bioql PyPI...
CVE-2025-57899
Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Compress: from n/a through = 6.50.54...
CVE-2025-57899
CVE-2025-57899 (WP Compress) : A missing-authorization flaw in WP Compress (WordPress plugin, affected through 6.50.54) allows accessing functionality not properly constrained by ACLs. Impact is access-level bypass for certain features; CVSS 3.1 base score 5.3 (Medium). The issue is listed as Pat...
PT-2025-39009
Name of the Vulnerable Software and Affected Versions WP Compress versions through 6.50.54 Description A missing authorization issue exists in AresIT WP Compress, allowing access to functionality that is not properly constrained by Access Control Lists ACLs. Recommendations Update WP Compress to ...
CVE-2025-47479
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...
CVE-2025-47479
Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through = 6.30.30...
CVE-2025-47479
Weak Authentication vulnerability in AresIT WP Compress allows Authentication Abuse. This issue affects WP Compress: from n/a through 6.30.30...
CVE-2025-47479
CVE-2025-47479 describes a broken/broken authentication vulnerability in WordPress WP Compress (WP Compress – Instant Performance & Speed Optimization) affecting versions up to 6.30.30. Exploitation would allow authentication abuse due to weak authentication mechanisms. A fix is available; upgrad...
CVE-2025-47546
Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress allows Cross Site Request Forgery. This issue affects WP Compress: from n/a through 6.30.30...
CVE-2025-47546
Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...
CVE-2025-47546 WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through = 6.30.30...
CVE-2025-47546
CVE-2025-47546: CSRF in WordPress WP Compress
PT-2025-20159 · Unknown · Aresit Wp Compress
Name of the Vulnerable Software and Affected Versions: AresIT WP Compress versions n/a through 6.30.30 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a through...