Advisories · Technology
WP Media WP Rocket.
Every CVE that names WP Media WP Rocket among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability
- WP Media WP Rocket
- Broken access control
- CVSS 7.5 High
WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability
- WP Media WP Rocket
- CWE-624
- CVSS 7.2 High
WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint
- WP Media WP Rocket
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability
- WP Media WP Rocket
- Cross-site scripting (XSS)