Skip to content
Aresit vulnerabilities
Newest
-
aresit wp compress – instant performance & speed optimization
WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters
CVE-2026-120551
5.3 Medium
-
aresit wp compress – instant performance & speed optimization
WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint
CVE-2026-104755
4.8 Medium
-
aresit wp compress
WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability
CVE-2026-84757
8.2 High
-
aresit wp compress
WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability
CVE-2026-73343
10.0 Critical
-
aresit wp compress – instant performance & speed optimization
WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion
CVE-2026-17608
6.5 Medium
-
aresit wp compress
WP Compress < 7.10.04 - Reflected XSS via test_zone
CVE-2026-9066
6.1 Medium
-
aresit wp compress
WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability
CVE-2026-25370
5.3 Medium
-
aresit wp compress
WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability
CVE-2025-57899
5.3 Medium
-
aresit wp compress
WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability
CVE-2025-47479
5.3 Medium
-
aresit wp compress
WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-47546
7.1 High
-
aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
CVE-2025-2110
8.8 High
-
aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
CVE-2025-2109
5.8 Medium
-
aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
CVE-2024-12047
6.1 Medium
-
aresit wp compress
WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-47384
7.1 High
-
wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization
CVE-2024-4445
6.5 Medium
-
wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css
CVE-2023-6812
4.3 Medium
-
wpcompress image optimizer, wp compress, aresit wp compress – instant performance & speed optimization +2 more
WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
CVE-2024-1934
7.5 High
-
wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
CVE-2023-6699
9.1 Critical