AresIT WP Compress Weak Authentication Vulnerability

A weak authentication vulnerability allowing authentication abuse has been identified in the AresIT WP Compress plugin for WordPress, affecting versions through 6.30.30. This vulnerability can be exploited to perform actions that should only be available to users with higher privileges, potentially leading to unauthorized admin access on the website.

Impact

Exploitation of this vulnerability could allow a malicious actor to gain admin access to the affected WordPress site.

Remediation

Users of the WP Compress plugin should update to version 6.30.31 or later. Patchstack users can enable auto-updates for vulnerable plugins.