WordPress plugin
WP Compress – Instant Performance & Speed Optimization security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High3
- Medium14
- Low0
All WP Compress – Instant Performance & Speed Optimization vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Remote Code Execution <7.20.01Update to 7.20.01 | CVE-2026-73343 | |
| High7.3 | Unauthenticated Broken Authentication ≤6.30.30Update to 6.30.31 | CVE-2025-47479 | |
| High8.8 | Authenticated (Subscriber+) Missing Authorization via Multiple Functions ≤6.30.15Update to 6.30.16 | CVE-2025-2110 | |
| High7.5 | Missing Authorization to Unauthenticated CDN Modification ≤6.11.10Update to 6.11.11 | CVE-2024-1934 | |
| Critical9.1 | Unauthenticated Directory Traversal via css ≤6.10.33Update to 6.10.34 | CVE-2023-6699 |
- Critical9.8Unauthenticated Remote Code Execution
<7.20.01Update to 7.20.01
- High7.3Unauthenticated Broken Authentication
≤6.30.30Update to 6.30.31
- High8.8Authenticated (Subscriber+) Missing Authorization via Multiple Functions
≤6.30.15Update to 6.30.16
- High7.5Missing Authorization to Unauthenticated CDN Modification
≤6.11.10Update to 6.11.11
- Critical9.1Unauthenticated Directory Traversal via css
≤6.10.33Update to 6.10.34
WP Compress – Instant Performance & Speed Optimization: common questions
Does WP Compress – Instant Performance & Speed Optimization have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in WP Compress – Instant Performance & Speed Optimization: 2 critical, 3 high, 14 medium. None are known to affect version null.
How do I check which version of WP Compress – Instant Performance & Speed Optimization I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Compress – Instant Performance & Speed Optimization vulnerability?
CVE-2026-104755, published Oct 15, 2026: WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint. Severity: Medium (CVSS 4.8).
Is any WP Compress – Instant Performance & Speed Optimization vulnerability listed in CISA KEV?
No. None of the known WP Compress – Instant Performance & Speed Optimization vulnerabilities is currently listed in the CISA KEV catalog.