CVE-2025-57899: WordPress WP Compress Plugin <= 6.50.54 - Broken Access Control Vulnerability
Published Sep 22, 2025
·Updated
Missing Authorization vulnerability in AresIT WP Compress wp-compress-image-optimizer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Compress: from n/a through <= 6.50.54.
Affected Software
1 affected component
AresIT WP Compress<=6.50.54
Event History
Sep 22, 2025
CVE Published
via MITRE·06:25 PM
Data Sourced
via MITRE·06:25 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-57899?
CVE-2025-57899 is considered a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2025-57899?
To fix CVE-2025-57899, update the AresIT WP Compress plugin to version 6.50.55 or later.
3
What impact does CVE-2025-57899 have on my website?
CVE-2025-57899 can allow attackers to access and utilize functions that should be restricted, compromising your website's security.
4
Which versions are affected by CVE-2025-57899?
CVE-2025-57899 affects AresIT WP Compress plugin versions from n/a up to and including 6.50.54.
5
Is authentication required to exploit CVE-2025-57899?
No, CVE-2025-57899 allows attackers to exploit vulnerable functionality without proper authentication.