Aresit Wp Compress vulnerabilities

• aresit wp compress – instant performance & speed optimization WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters CVE-2026-120551 5.3 MediumNovember 3, 2026
• aresit wp compress – instant performance & speed optimization WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint CVE-2026-104755 4.8 MediumOctober 16, 2026
• aresit wp compress WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability CVE-2026-84757 8.2 HighSeptember 3, 2026
• aresit wp compress WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability CVE-2026-73343 10.0 CriticalAugust 18, 2026
• aresit wp compress – instant performance & speed optimization WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion CVE-2026-17608 6.5 MediumAugust 16, 2026
• aresit wp compress WP Compress < 7.10.04 - Reflected XSS via test_zone CVE-2026-9066 6.1 MediumJuly 23, 2026
• aresit wp compress WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability CVE-2026-25370 5.3 MediumFebruary 19, 2026
• aresit wp compress WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability CVE-2025-57899 5.3 MediumSeptember 22, 2025
• aresit wp compress WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability CVE-2025-47479 5.3 MediumJuly 4, 2025
• aresit wp compress WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47546 7.1 HighMay 7, 2025
• aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions CVE-2025-2110 8.8 HighMarch 26, 2025
• aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function CVE-2025-2109 5.8 MediumMarch 25, 2025
• aresit wp compress – instant performance & speed optimization, wpcompress wp compress +1 more WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter CVE-2024-12047 6.1 MediumJanuary 4, 2025
• aresit wp compress WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47384 7.1 HighOctober 5, 2024
• wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization CVE-2024-4445 6.5 MediumMay 14, 2024
• wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css CVE-2023-6812 4.3 MediumMay 14, 2024
• wpcompress image optimizer, wp compress, aresit wp compress – instant performance & speed optimization +2 more WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification CVE-2024-1934 7.5 HighApril 9, 2024
• wpcompress wp compress, aresit wp compress – instant performance & speed optimization +1 more WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css CVE-2023-6699 9.1 CriticalJanuary 11, 2024