CVE-2025-47546: WordPress WP Compress plugin <= 6.30.30 - Cross Site Request Forgery (CSRF) Vulnerability
Published May 7, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Cross Site Request Forgery.This issue affects WP Compress: from n/a through <= 6.30.30.
Affected Software
3 affected components
AresIT WP Compress<=6.30.30
WordPress WP Compress<=6.30.30
Wpcompress Wp Compress Wordpress<=6.30.30
Remediation
Information
Update the WordPress WP Compress plugin to the latest available version (at least 6.30.31).
Event History
May 7, 2025
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47546?
CVE-2025-47546 is classified as a High severity Cross-Site Request Forgery (CSRF) vulnerability.
2
How do I fix CVE-2025-47546?
To fix CVE-2025-47546, update AresIT WP Compress to a version later than 6.30.30.
3
Who is affected by CVE-2025-47546?
CVE-2025-47546 affects users of AresIT WP Compress versions up to and including 6.30.30.
4
When was CVE-2025-47546 disclosed?
CVE-2025-47546 was disclosed as part of ongoing security assessments for AresIT WP Compress.
5
What type of attack does CVE-2025-47546 enable?
CVE-2025-47546 enables attackers to perform Cross-Site Request Forgery (CSRF) attacks against vulnerable installations.