wpcompress kayıtları
wpcompress üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %36,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-862 Missing Authorization3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-24 Path Traversal: '../filedir'1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-47479İstismar yok | WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerabilitywpcompress · wp compress · CWE-1390 | Kritik9,8 | — | %0,4 | 4 Tem 2025 |
35İzleyin | CVE-2025-2110İstismar yok | WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functionswpcompress · wp compress · CWE-862 | Yüksek8,8 | — | %0,5 | 26 Mar 2025 |
35İzleyin | CVE-2024-32106İstismar yok | WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerabilitywpcompress · wp compress · CWE-352 | Yüksek8,8 | — | %0,2 | 11 Nis 2024 |
35İzleyin | CVE-2025-47546İstismar yok | WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerabilitywpcompress · wp compress · CWE-352 | Yüksek8,8 | — | %0,2 | 7 May 2025 |
30İzleyin | CVE-2023-6699İstismar yok | WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via csswpcompress · wp compress · CWE-24 | Yüksek7,5 | — | %0,9 | 11 Oca 2024 |
30İzleyin | CVE-2024-1934İstismar yok | WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modificationwpcompress · wp compress · CWE-862 | Yüksek7,5 | — | %0,7 | 9 Nis 2024 |
24İzleyin | CVE-2023-6812İstismar yok | WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via csswpcompress · wp compress · CWE-601 | Orta6,1 | — | %0,4 | 14 May 2024 |
24İzleyin | CVE-2024-12047İstismar yok | WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameterwpcompress · wp compress · CWE-79 | Orta6,1 | — | %0,4 | 4 Oca 2025 |
24İzleyin | CVE-2024-47384İstismar yok | WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerabilitywpcompress · wp compress · CWE-79 | Orta6,1 | — | %0,3 | 5 Eki 2024 |
23İzleyin | CVE-2025-2109İstismar yok | WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Functionwpcompress · wp compress · CWE-918 | Orta5,8 | — | %0,4 | 25 Mar 2025 |
17İzleyin | CVE-2024-4445İstismar yok | WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorizationwpcompress · wp compress · CWE-862 | Orta4,3 | — | %0,3 | 14 May 2024 |
- CVE-2025-4747939İzleyin
WordPress WP Compress plugin <= 6.30.30 - Broken Authentication Vulnerability
KritikCVSS 9,8İstismar yokEPSS %0wpcompress · wp compress4 Tem 2025
- CVE-2025-211035İzleyin
WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions
YüksekCVSS 8,8İstismar yokEPSS %0wpcompress · wp compress26 Mar 2025
- CVE-2024-3210635İzleyin
WordPress WP Compress plugin <= 6.10.35 - Cross Site Request Forgery (CSRF) vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpcompress · wp compress11 Nis 2024
- CVE-2025-4754635İzleyin
WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0wpcompress · wp compress7 May 2025
- CVE-2023-669930İzleyin
WP Compress – Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css
YüksekCVSS 7,5İstismar yokEPSS %1wpcompress · wp compress11 Oca 2024
- CVE-2024-193430İzleyin
WP Compress – Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification
YüksekCVSS 7,5İstismar yokEPSS %1wpcompress · wp compress9 Nis 2024
- CVE-2023-681224İzleyin
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css
OrtaCVSS 6,1İstismar yokEPSS %0wpcompress · wp compress14 May 2024
- CVE-2024-1204724İzleyin
WP Compress – Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter
OrtaCVSS 6,1İstismar yokEPSS %0wpcompress · wp compress4 Oca 2025
- CVE-2024-4738424İzleyin
WordPress WP Compress plugin <= 6.20.13 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0wpcompress · wp compress5 Eki 2024
- CVE-2025-210923İzleyin
WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function
OrtaCVSS 5,8İstismar yokEPSS %0wpcompress · wp compress25 Mar 2025
- CVE-2024-444517İzleyin
WP Compress – Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization
OrtaCVSS 4,3İstismar yokEPSS %0wpcompress · wp compress14 May 2024