MEDIUM✓ PATCH🇬🇧 English

CVE-2025-47479

CVSS 5.3v3.1pub. 2025-07-04upd. 2026-04-23

Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abuse.This issue affects WP Compress: from n/a through <= 6.30.30.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

  • Wpcompress Wp Compress

    APP
    Wpcompress
    < 6.30.31
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2023-6699CRITICAL9.1PL ✓ten sam produkt

Path Traversal w pluginie WP Compress dla WordPress — odczyt plików bez uwierzytelnienia

CVE-2025-47546HIGH7.1ten sam produkt

Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross...

CVE-2025-2110HIGH8.8ten sam produkt

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized ...

CVE-2024-47384HIGH7.1ten sam produkt

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AresIT W...

CVE-2024-1934HIGH7.5ten sam produkt

The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due ...

CVE-2025-47479 — MEDIUM 5.3 | CVEbaza.pl