Skip to content
OpenAdvisories

Product · WP Media

WP Rocket

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-97075

    WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a before 3.23.5.

    WP Media WP Rocket
  • Medium 5.9
    CVE-2026-28044

    WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects WP Rocket: from n/a through 3.19.4.

    WP Media WP Rocket