CVE-2026-104755 | WP Compress Plugin up to 7.25.00 on WordPress Dispatcher start_comms apikey/group/setting/value privileges management

October 16, 2026 Yanac

A vulnerability was found in WP Compress Plugin up to 7.25.00 on WordPress. It has been classified as critical. Affected is the function wps_ic_comms::start_comms of the component Dispatcher. Performing a manipulation of the argument apikey/group/setting/value results in improper privilege management.

This vulnerability is reported as CVE-2026-104755. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More