Skip to main content

Wp Compress CVE-2025-47479

| EUVDEUVD-2025-19979 MEDIUM
Weak Authentication (CWE-1390)
2025-07-04 audit@patchstack.com
WordPress Information Disclosure Wp Compress Wordpress Plugin Wpcompress
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

5
Severity Changed
Apr 23, 2026 - 15:42 NVD
CRITICAL MEDIUM
CVSS changed
Apr 23, 2026 - 15:42 NVD
9.8 (CRITICAL) 5.3 (MEDIUM)
EUVD ID Assigned
Mar 16, 2026 - 02:42 euvd
EUVD-2025-19979
Analysis Generated
Mar 16, 2026 - 02:42 vuln.today
CVE Published
Jul 04, 2025 - 12:15 nvd
CRITICAL 9.8

DescriptionCVE.org

Weak Authentication vulnerability in AresIT WP Compress allows Authentication Abuse. This issue affects WP Compress: from n/a through 6.30.30.

AnalysisAI

A security vulnerability in AresIT WP Compress allows Authentication Abuse (CVSS 5.3). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor. Affects AresIT WP Compress allows Authentication Abuse.

RemediationAI

Monitor vendor channels for patch availability.

More in Wp Compress

View all
CVE-2026-73343 CRITICAL
10.0 Aug 18

Remote code execution in the WP Compress (Image Optimizer) WordPress plugin before version 7.20.01 allows unauthenticate
CVE-2026-9066 MEDIUM POC
6.1 Jul 23

Reflected XSS in WP Compress WordPress plugin (versions before 7.10.04) allows unauthenticated remote attackers to execu
CVE-2023-6699 CRITICAL
9.1 Jan 11

The WP Compress - Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions
CVE-2025-2110 HIGH
8.8 Mar 26

The WP Compress - Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized access, mo
CVE-2026-84757 HIGH
8.2 Sep 03

Unauthenticated settings modification in the WP Compress WordPress plugin (versions <= 7.21.28) allows any remote attack
CVE-2024-1934 HIGH
7.5 Apr 09

The WP Compress - Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missi
CVE-2024-47384 HIGH
7.1 Oct 05

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AresIT WP Compress
CVE-2025-47546 HIGH
7.1 May 07

Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress allows Cross Site Request Forgery.30.30. Rated hig
CVE-2024-4445 MEDIUM
6.5 May 14

The WP Compress - Image Optimizer [All-In-One] plugin for WordPress is vulnerable to unauthorized modification of data d
CVE-2025-2109 MEDIUM
5.8 Mar 25

The WP Compress - Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Server-Side Request For
CVE-2023-6812 MEDIUM
4.3 May 14

The WP Compress - Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to,
CVE-2024-32106 MEDIUM
4.3 Apr 11

Cross-Site Request Forgery (CSRF) vulnerability in WP Compress WP Compress - Image Optimizer [All-In-One].10.35. Rated m

Same weakness CWE-1390 – Weak Authentication

View all
CVE-2026-55040 CRITICAL POC
9.1
CVE-2025-40552 CRITICAL POC
9.8
CVE-2025-40554 CRITICAL POC
9.8
CVE-2024-34451 CRITICAL POC
9.1
CVE-2024-36787 HIGH POC
8.8
CVE-2024-0822 HIGH POC
7.5
CVE-2026-73819 CRITICAL
9.3
CVE-2026-68067 CRITICAL
9.3

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2025-47479 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy