CVE Catalog
CVE-2026-73343
CriticalCVSS 10.0Summary
An unauthenticated attacker can remotely execute arbitrary code (RCE) in WP Compress versions prior to 7.20.01.
Risk Assessment
Full compromise of the WordPress site, data theft, or malware installation.
Recommendation
Update the WP Compress plugin to version 7.20.01 or later.
Original NVD description (English source)
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.