WP Media vulnerabilities

Newest CVEs

• CVE-2026-97075

  WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability

  WP Media · WP Rocket

  Medium6.5
• CVE-2026-97076

  WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability

  WP Media · WP Rocket

  High7.5
• CVE-2026-105884

  WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

  WP Media · Rocket Lazy Load

  Medium6.5
• CVE-2026-5934

  WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint

  WP Media · WP Rocket

  High7.2
• CVE-2026-65443

  WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability

  WP Media · BackWPup

  High7.1
• CVE-2026-49045

  WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability

  WP Media · Adminimize

  Medium4.3
• CVE-2026-28044

  WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability

  WP Media · WP Rocket

  Medium5.9