All products

wp-rocket

WordPress · Plugin
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
WP Rocket < 3.23.5 - Unauthenticated Denial of ServiceCVE-2026-97076 wp-rocket WordPress High Fix reported
WP Rocket < 3.23.5 - Missing AuthorizationCVE-2026-97075 wp-rocket WordPress Medium Fix reported
WP Rocket 3.23.1 - 3.23.3.2 - Unauthenticated Information Exposure wp-rocket WordPress Medium Fix reported
WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon EndpointCVE-2026-5934 wp-rocket WordPress High Fix reported
Rocket <= 3.19.4 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2026-28044 wp-rocket WordPress Medium Fix reported
WP Rocket <= 2.10.3 - Local File InclusionCVE-2017-11658 wp-rocket WordPress High Fix reported