Skip to content
OpenAdvisories

Vendor

WP Media

14 known vulnerabilities.

Products

BackWPup – WordPress Backup & Restore Plugin 6 WP Rocket 4 LazyLoad Plugin – Lazy Load Images, Videos, and Iframes 1 Adminimize 1 Rocket Lazy Load 1 BackWPup 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-97075

    WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5.

    WP Media WP Rocket
  • Medium 6.5
    CVE-2026-105884

    WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affects Rocket Lazy Load: from n/a through 2.4.0.

    WP Media Rocket Lazy Load
  • Medium 4.3
    CVE-2026-49045

    WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Adminimize: from n/a through 1.11.11.

    WP Media Adminimize
  • Medium 5.9
    CVE-2026-28044

    WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects WP Rocket: from n/a through 3.19.4.

    WP Media WP Rocket
  • Medium 5.3
    CVE-2025-10579

    BackWPup <= 5.5.0 - Missing Authorization to Sensitive Information Exposure

    The BackWPup – WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'backwpup_working' AJAX action in all versions up to, and including, 5.5.0. This makes it possible for …

    WP Media BackWPup – WordPress Backup & Restore Plugin Web / CMS
  • Medium 6.8
    CVE-2023-5505

    BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal

    The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the job-specific backup folder. This allows authenticated attackers to store backups in arbitrary folders on the server provided they can be wri…

    WP Media BackWPup – WordPress Backup & Restore Plugin Web / CMS