CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-73343

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-73343

WP Compress is a WordPress image optimization plugin. An unauthenticated Remote Code Execution (RCE) vulnerability affects versions prior to 7.20.01 , allowing a remote attacker with no prior access to execute arbitrary code on the host, resulting in full compromise of confidentiality, integrity,...

EUVD-2026-60774

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

CVE-2026-73343 WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in WP Compress 7.20.01 versions...

WordPress WP Compress plugin <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability

Cross-Site Request Forgery to Arbitrary Options Deletion vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Compress versions = 7.10.09...

CVE-2026-17608

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-17608 WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-17608 WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

EUVD-2026-59924

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-17608

The CVE concerns the WP Compress – Instant Performance & Speed Optimization plugin for WordPress. A CSRF flaw exists in all versions up to and including 7.10.09 due to missing/incorrect nonce validation on the top-level template code function. This allows unauthenticated attackers to delete arbit...

CVE-2026-17608

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

PT-2026-73134

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09. This is due to missing or incorrect nonce validation on the top-level template code function. This makes it possible for...

CVE-2026-70455 rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string matching on long option names. Attackers can specify --zt=N...

Important: Red Hat Security Advisory: perl:5.32 security update

An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

A flaw was found in perl-IO-Compress, a component used for data compression and decompression. A remote attacker could exploit this vulnerability by crafting a malicious input, specifically an output glob, that bypasses the intended security measures. This could lead to the execution of...

CLSA-2026-1779756518 TuxCare security update for org.apache.commons:commons-compress (2 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 2 CVEs. Fixed in 1.21-tuxcare.1...

CLSA-2026-1770941373 TuxCare security update for org.apache.commons:commons-compress (4 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 4 CVEs. Fixed in 1.19-tuxcare.2...

CLSA-2025-1764806869 TuxCare security update for org.apache.commons:commons-compress (5 CVEs)

TuxCare rebuilt org.apache.commons:commons-compress to address 5 CVEs. Fixed in 1.20-tuxcare.1...

Malicious code in @keyv/compress-gzip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca4a62f75f4ef4696136cf194317102ad13aa319ba3319fb7dce12de6ae8e9d @keyv/compress-gzip is a gzip compression adapter for the keyv key-value storage library. No static or behavioral indicators of credential access,...