AresIT vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20256
3. 20266

Newest CVEs

• CVE-2026-120551

  WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters

  aresit · WP Compress – Instant Performance & Speed Optimization

  Medium5.3
• CVE-2026-104755

  WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint

  aresit · WP Compress – Instant Performance & Speed Optimization

  Medium4.8
• CVE-2026-84757

  WordPress WP Compress plugin <= 7.21.28 - Settings Change vulnerability

  AresIT · WP Compress

  High8.2
• CVE-2026-73343

  WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

  AresIT · WP Compress

  Critical10.0
• CVE-2026-17608

  WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion

  aresit · WP Compress – Instant Performance & Speed Optimization

  Medium6.5
• CVE-2026-25370

  WordPress WP Compress plugin <= 6.60.28 - Broken Access Control vulnerability

  AresIT · WP Compress

  Medium5.3
• CVE-2025-57899

  WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability

  AresIT · WP Compress

  Medium5.3
• CVE-2025-47479

  WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability

  AresIT · WP Compress

  Medium5.3
• CVE-2025-47546

  WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability

  AresIT · WP Compress

  High7.1
• CVE-2025-2110

  WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

  aresit · WP Compress – Instant Performance & Speed Optimization

  High8.8