CVE Catalog
CVE-2026-73343
CriticalCVSS 10.0Exploitation Probability (EPSS)
Elevated risk0.80%
54th percentile - higher than 54% of all known CVEs
Summary
An unauthenticated attacker can remotely execute arbitrary code (RCE) in WP Compress versions prior to 7.20.01.
Risk Assessment
Full compromise of the WordPress site, data theft, or malware installation.
Recommendation
Update the WP Compress plugin to version 7.20.01 or later.
Original NVD description (English source)
Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions.