HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-47384

CVSS 7.1v3.1pub. 2024-10-05upd. 2026-04-23

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Reflected XSS.This issue affects WP Compress: from n/a through <= 6.20.13.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

  • Wpcompress Wp Compress

    APP
    Wpcompress
    < 6.21.01
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-6699CRITICAL9.1PL ✓ten sam produkt

Path Traversal w pluginie WP Compress dla WordPress — odczyt plików bez uwierzytelnienia

CVE-2025-47546HIGH7.1ten sam produkt

Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross...

CVE-2025-2110HIGH8.8ten sam produkt

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to unauthorized ...

CVE-2024-1934HIGH7.5ten sam produkt

The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due ...

CVE-2025-47479MEDIUM5.3ten sam produkt

Weak Authentication vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Authentication Abus...