WP Compress WordPress Plugin Missing Authorization Vulnerability on AJAX Functions

A vulnerability exists in the WP Compress - Instant Performance & Speed Optimization plugin for WordPress, affecting all versions through 6.30.15. The issue stems from inadequate capability checks on several AJAX functions, allowing authenticated attackers with Subscriber-level access or higher to gain unauthorized access, modify, or delete sensitive data. This vulnerability could disrupt the plugin's functionality and overall site performance.

Impact

Exploitation of this vulnerability could lead to unauthorized access, modification, and deletion of sensitive data, disrupting the plugin's functionality and potentially degrading overall site performance.

Remediation

Users can update to version 6.30.16 or a newer patched version to address this vulnerability.