Unauthorized Access Vulnerability in WP Compress Plugin for WordPress

CVE-2025-2110

What is CVE-2025-2110?

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress has a vulnerability that allows authenticated attackers with Subscriber-level access and above to exploit insufficient capability checks in its AJAX functions. This can lead to unauthorized access, allowing attackers to retrieve sensitive settings, modify configuration files, or even delete critical data. The potential impact on website functionality and data integrity makes this a significant concern for site administrators utilizing the affected plugin.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References