Unauthenticated Settings Change in WP Compress <= 7.21.28 versions.
CVE-2026-84757 at the National Vulnerability Database