The vulnerability identified as CVE-2025-47479 affects the WP Compress plugin by AresIT, specifically versions up to 6.30.30. It is characterized by weak authentication controls that permit abuse of authentication mechanisms without any privileges or user interaction. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. There is no information on available patches or vendor advisories, and no known active exploitation has been reported.

The vulnerability allows an attacker to abuse authentication mechanisms in the WP Compress plugin, potentially leading to unauthorized integrity modifications. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits in the wild have been reported, indicating limited or no active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's functionality or implementing compensating controls to limit exposure.