CVE-2025-30932: WordPress WP Compress for MainWP plugin <= 6.30.32 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WP Compress WP Compress for MainWP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Compress for MainWP: from n/a through 6.30.32.
Other sources
Missing Authorization vulnerability in WP Compress WP Compress for MainWP wp-compress-mainwp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Compress for MainWP: from n/a through <= 6.30.32.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30932?
CVE-2025-30932 is rated as a high severity vulnerability due to missing authorization in WP Compress for MainWP.
How do I fix CVE-2025-30932?
To fix CVE-2025-30932, update WP Compress for MainWP to version 6.30.33 or later.
What are the potential impacts of CVE-2025-30932?
CVE-2025-30932 allows attackers to exploit incorrectly configured access control security levels, potentially gaining unauthorized access.
Which versions of WP Compress are affected by CVE-2025-30932?
CVE-2025-30932 affects all versions of WP Compress for MainWP up to and including version 6.30.32.
Who is the vendor for CVE-2025-30932?
The vendor for CVE-2025-30932 is WP Compress.