Vulnerabilities in WP Media
7 resultsCVE-2026-5934HIGHWP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon EndpointEPSS 0.3%CVE-2026-97076HIGHWordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerabilityEPSS 0.3%CVE-2026-65443HIGHWordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-49045MEDIUMWordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-97075MEDIUMWordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-28044MEDIUMWordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-105884MEDIUMWordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%