compress_&_upload vulnerabilities

CVEs whose affected-version data names the compress_&_upload package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-8889Low· 3.8PoC

1y ago

The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in mu…

The Compress & Upload WordPress plugin before 1.0.5 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (for example in mu…

▾ Twilighteliehanna · compress_&_uploadEPSS 0.29%via NVD