WP Compress for MainWP

WP Compress for MainWP has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Server-Side Request Forgery (SSRF).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, one record each. WP Compress for MainWP is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all WP Compress for MainWP vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-64639

Compress for MainWP <= 6.50.07 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records


2025-11-29 00:00	Compress for MainWP <= 6.50.07 - Missing Authorization WP Compress for MainWP <= 6.50.07	`CVE-2025-64639`	5.3 Medium	Legion Hunter	No
2025-06-05 00:00	WP Compress for MainWP <= 6.30.32 - Missing Authorization WP Compress for MainWP <= 6.30.32	`CVE-2025-30932`	4.3 Medium	HLog	Yes
2025-03-28 00:00	WP Compress for MainWP <= 6.30.03 - Authenticated (Subscriber+) Server-Side Request Forgery WP Compress for MainWP <= 6.30.03	`CVE-2025-31076`	6.4 Medium	theviper17y	Yes

Showing 1–3 of 3 reports

Latestv7.22.00

WP Compress for MainWP

Author

WP Compress

4.7(3)

94/100

Last Updated

2026-08-31 (12d ago)

Active Installs

500+

Downloads

16,840

Requires WP

6.5+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2019-03-07 (8y ago)

Bulk install, activate and connect all of your MainWP Child sites to the WP Compress portal in just a few clicks. Now you can easily: Install & Activate WP Compress on all Child Sites One-Click Connect to the WP Compress Cloud & Portal Assign Monthly Quotas Add Starter Credits Coming Soon: Integrations with MainWP Reporting Bulk Settings Configuration Support Bulk Compression Support Autopilot Activation WP Compress includes: Autopilot Image Optimization Thumbnails Optimized For Free Monthly Quotas for Clients Detailed Compression Reports Centralized Management Portal Unlimited Cloud Backups Additional Features: Lossless, Intelligent & Ultra Compression Modes Over-Compression Prevention Engine Single Image Compression Single Image Restore from Cloud One-Click Bulk Optimization One-Click Bulk Restore Agency Image Optimization Automated Image Resize Preserve EXIF Data Frequent Updates Live Chat Support How much does it cost? You’ll receive 100 images for free just for creating an account and memberships start at just $5 per 1,000 images optimized. Keep in mind this is full sized images and all thumbnails which can cost on average 11.8 credits from other providers. View our prices and plans.

View on WordPress.org