WordPress plugin
WP Compress for MainWP security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All WP Compress for MainWP vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤6.50.07No patch available | CVE-2025-64639 | |
| Medium4.3 | Missing Authorization ≤6.30.32Update to 6.50.05 | CVE-2025-30932 | |
| Medium6.4 | Authenticated (Subscriber+) Server-Side Request Forgery ≤6.30.03Update to 6.30.06 | CVE-2025-31076 |
- Medium5.3Missing Authorization
≤6.50.07No patch available
- Medium4.3Missing Authorization
≤6.30.32Update to 6.50.05
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery
≤6.30.03Update to 6.30.06
WP Compress for MainWP: common questions
Does WP Compress for MainWP have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WP Compress for MainWP: 3 medium. At least one is not fixed in the latest version.
How do I check which version of WP Compress for MainWP I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Compress for MainWP vulnerability?
CVE-2025-64639, published Nov 29, 2025: Compress for MainWP <= 6.50.07 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any WP Compress for MainWP vulnerability listed in CISA KEV?
No. None of the known WP Compress for MainWP vulnerabilities is currently listed in the CISA KEV catalog.