wp_compress_instant_performance_speed_optimization vulnerabilities

CVEs whose affected-version data names the wp_compress_instant_performance_speed_optimization package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104755Medium· 4.8

today

WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerability exists because the `start_comms` dispatcher (`wps_ic_co…

▾ Sunlitaresit · WP Compress – Instant Performance & Speed Optimizationvia CVEORG