Skip to content
PluginCanary

WP Compress

WP Compress - Instant Performance & Speed Optimization
by AresIT · 9,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 182 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for WP Compress
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is WP Compress still maintained?
Yes. Last release 2 Nov 2026, 182 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns WP Compress, and has it changed hands?
No change recorded. Main committer smartersite since Jan 2018. 3 Nov 2026 · SVN log
Was WP Compress removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is WP Compress safe?
19 known vulnerabilities, all fixed (latest in 7.26.00). Not on the exploited list. 15 Oct 2026 · Wordfence Intelligence
Is the latest WP Compress update safe to install?
No ownership change before 7.30.45. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
smartersite16 Jan 2018 to 26 Apr 2025, 614 commits
aresit17 May 2025 to 2 Nov 2026, 114 commits

2 committers recorded. No ownership change since 2018.

Maintenance

Last release
2 days ago
Releases, 24 months
182
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for WP Compress
Q1 202423
Q2 20240
Q3 20243
Q4 20240
Q1 20250
Q2 202511
Q3 202527
Q4 202514
Q1 202631
Q2 202681
Q3 202612
Q4 20266

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star130
4 star1
3 star5
2 star3
1 star16

Security record

13 vulnerabilities in 24 months (19 on record), all patched (latest fixed in 7.26.00).

Show 19 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
15 Oct 2026WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint4.8<= 7.25.007.26.00Patched before disclosure
8 Sep 2026WP Compress <= 7.22.01 - Missing Authorization to Unauthenticated Account Linking / Site Takeover via 'force_ic_connect' and 'apikey' Parameters5.3<= 7.22.017.22.38Patched before disclosure
2 Sep 2026WP Compress - Instant Performance & Speed Optimization <= 7.21.28 - Missing Authorization to Unauthenticated Settings Update5.3<= 7.21.287.22.0n/a
18 Aug 2026WP Compress - Instant Performance & Speed Optimization < 7.20.01 - Unauthenticated Remote Code Execution9.8< 7.20.017.20.01Patched before disclosure
15 Aug 2026WP Compress <= 7.10.09 - Cross-Site Request Forgery to Arbitrary Options Deletion6.5<= 7.10.097.20.01Patched before disclosure
2 Jul 2026Compress <= 7.10.3 - Reflected Cross-Site Scripting6.1<= 7.10.37.10.04Patched before disclosure
17 Feb 2026Compress <= 6.60.28 - Missing Authorization5.3<= 6.60.286.60.29Patched before disclosure
22 Sep 2025WP Compress <= 6.50.54 - Missing Authorization5.3<= 6.50.546.50.555
3 Jul 2025WP Compress <= 6.30.30 - Unauthenticated Broken Authentication7.3<= 6.30.306.30.31Patched before disclosure
7 May 2025WP Compress <= 6.30.30 - Cross-Site Request Forgery4.3<= 6.30.306.30.31Patched before disclosure
25 Mar 2025WP Compress <= 6.30.15 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions8.8<= 6.30.156.30.16385
24 Mar 2025WP Compress <= 6.30.15 - Unauthenticated Server-Side Request Forgery via init Function5.8<= 6.30.156.30.16386
3 Jan 2025WP Compress - Instant Performance & Speed Optimization <= 6.30.03 - Reflected Cross-Site Scripting via custom_server Parameter6.1<= 6.30.036.30.04466
30 Sep 2024WP Compress - Image Optimizer [All-In-One] <= 6.20.13 - Reflected Cross-Site Scripting6.1<= 6.20.136.21.01562
13 May 2024WP Compress - Image Optimizer [All-In-One] <= 6.20.01 - Missing Authorization6.5<= 6.20.016.20.02n/a
13 May 2024WP Compress - Image Optimizer [All-In-One] <= 6.20.01 - Open Redirect via css4.3<= 6.20.016.20.02n/a
11 Apr 2024WP Compress - Image Optimizer [All-In-One] <= 6.10.35 - Cross-Site Request Forgery4.3<= 6.10.356.11.01n/a
21 Mar 2024WP Compress - Image Optimizer <= 6.11.08 - Missing Authorization to Unauthenticated CDN Modification7.5<= 6.11.106.11.11n/a
3 Jan 2024WP Compress - Image Optimizer [All-In-One] <= 6.10.33 - Unauthenticated Directory Traversal via css9.1<= 6.10.336.10.34833

Changelog mentions of security fixes: 7.10.04 (security); 7.25.00 (security); 7.26.00 (security); 7.30.30 (security); 7.30.35 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

9,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WP Compress
4 May 2026328
11 May 2026843
18 May 20261,062
25 May 2026679
1 Jun 2026622
8 Jun 2026638
15 Jun 2026519
22 Jun 20269,557
29 Jun 202613,882
6 Jul 20263,078
13 Jul 2026977
20 Jul 20261,121
27 Jul 20261,458
3 Aug 2026891
10 Aug 202614,610
17 Aug 20263,838
24 Aug 20261,469
31 Aug 202614,580
7 Sep 20262,943
14 Sep 202612,049
21 Sep 20262,891
28 Sep 20266,255
5 Oct 20267,187
12 Oct 20262,987
19 Oct 20262,201
26 Oct 202611,621
2 Nov 20262,634

Weekly downloads over the last 4 weeks are 9% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Resize Image After UploadScore 100 · 80,000+Image PlaceholdersScore 100 · 60,000+ImageMagick EngineScore 100 · 60,000+Enhanced Responsive ImagesScore 100 · 50,000+AJAX Thumbnail RebuildScore 100 · 30,000+

Facts

Version7.30.45
AuthorAresIT
Added16 Jan 2018
Last updated2 Nov 2026
Active installs9,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP8.0
CategoryPerformance & Optimization > Caching Solutions
Tagscache, speed, wpcompress, performance, image optimization

Questions

Is WP Compress still maintained?

Yes. Last release 2 Nov 2026, 182 releases in the last 24 months.

Who owns WP Compress, and has it changed hands?

No change recorded. Main committer smartersite since Jan 2018.

Was WP Compress removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is WP Compress safe?

19 known vulnerabilities, all fixed (latest in 7.26.00). Not on the exploited list.

Is the latest WP Compress update safe to install?

No ownership change before 7.30.45. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue