This vulnerability in WP Compress for MainWP permits Server-Side Request Forgery (SSRF), enabling an attacker with low privileges to cause the server to make unintended requests. The affected versions include all releases up to 6.30.03. The CVSS 3.1 base score is 4.9, reflecting medium severity with network attack vector, high attack complexity, low privileges required, no user interaction, and partial impact on confidentiality and integrity but no impact on availability. No patch or vendor advisory details are currently available to confirm remediation status.

An attacker with low privileges can exploit this SSRF vulnerability to make the server perform unauthorized requests, potentially leading to partial disclosure or modification of information. There is no indication of impact on system availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual server request activity related to WP Compress for MainWP.