CVE-2026-104755

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress (versions ¢= 7.25.00 ) is vulnerable to unauthenticated privilege escalation . The flaw exists in the wps_ic_comms::start_comms dispatcher, which validates the apikey parameter without a nonce or capability check, the...

EUVD-2026-102793

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the startcomms dispatcher wpsiccomms::startcomms, hooked on every front-end request, gates access on...