Skip to content
OpenAdvisories

Vendor

rockiger

2 known vulnerabilities.

Products

ReactPress – Create React App for WordPress 1 ReactPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-92712

    ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter

    The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes …

    rockiger ReactPress – Create React App for WordPress Web / CMS
  • Medium 6.0
    CVE-2026-66455

    WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability

    Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.

    rockiger ReactPress