Skip to content
OpenAdvisories
High · 7.1 CVE-2026-42418 EUVD-2026-93055GHSA-842r-42wq-mc89

WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2026 · Updated Oct 7, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affects Social Rocket: from n/a through 1.3.5.

Affected products

VendorProductAffectedFixed
Socialrocket Social Rocket ≤ 1.3.5 —

References