CVE-2026-120551 WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.22.01. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

CVE-2026-120551

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress (all versions up to and including 7.22.01 ) is vulnerable to an authorization bypass (CWE-862). The plugin fails to properly verify user authorization, allowing unauthenticated attackers to link a victim site to an at...