HIGH✓ PATCH🇬🇧 English

CVE-2025-47546

CVSS 7.1v3.1pub. 2025-05-07upd. 2026-04-23

Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through <= 6.30.30.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

  • Wpcompress Wp Compress

    APP
    Wpcompress
    ≤ 6.30.30
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2023-6699CRITICAL9.1PL ✓ten sam produkt

Path Traversal w pluginie WP Compress dla WordPress — odczyt plików bez uwierzytelnienia

CVE-2025-2110HIGH8.8ten sam produkt

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized ...

CVE-2024-47384HIGH7.1ten sam produkt

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AresIT W...

CVE-2024-1934HIGH7.5ten sam produkt

The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due ...

CVE-2025-47479MEDIUM5.3ten sam produkt

Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abus...