Unauthorized Access Vulnerability in WP Compress Plugin for WordPress

CVE-2025-2110

What is CVE-2025-2110?

The WP Compress – Instant Performance & Speed Optimization plugin for WordPress has a vulnerability that allows authenticated attackers with Subscriber-level access and above to exploit insufficient capability checks in its AJAX functions. This can lead to unauthorized access, allowing attackers to retrieve sensitive settings, modify configuration files, or even delete critical data. The potential impact on website functionality and data integrity makes this a significant concern for site administrators utilizing the affected plugin.

References