WP Media vulnerabilities
7 published CVEs name WP Media among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-97075
WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability
WP Media · WP Rocket
Medium6.5 - CVE-2026-97076
WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability
WP Media · WP Rocket
High7.5 - CVE-2026-105884
WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
WP Media · Rocket Lazy Load
Medium6.5 - CVE-2026-5934
WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint
WP Media · WP Rocket
High7.2 - CVE-2026-65443
WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability
WP Media · BackWPup
High7.1 - CVE-2026-49045
WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability
WP Media · Adminimize
Medium4.3 - CVE-2026-28044
WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability
WP Media · WP Rocket
Medium5.9