WP Rocket vulnerabilities | LiveThreat CVE Feed

Product

WP Rocket

by WP Media · last CVE Oct 9, 2026

CVEs

On KEV

7.5

Max CVSS

New 30D

Severity mix

Critical 0High 2Medium 2Low 0

Severity

Exploitation

Watch

Add WP Rocket to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-97075	6.5	0%	Oct 9	WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability Affected: before 3.23.5
CVE-2026-28044	5.9	0%	Mar 19	WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability Affected: through 3.19.4