What’s Vulnerable › Products

WP Media WP Rocket vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your WP Media WP Rocket version is affected

Latest WP Media WP Rocket vulnerabilities

• CVE-2026-97075 — WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-97076 — WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability (CVSS 7.5)
• CVE-2026-5934 — WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint (CVSS 7.2)
• CVE-2026-28044 — WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)