Known Vulnerabilities for WP Rocket by WP Media
Listed below are 10 of the newest known vulnerabilities associated with "WP Rocket" by "WP Media".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-29198 json | In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can le... | Not Provided | 2026-04-23 | 2026-04-23 |
| CVE-2026-28044 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket wp-r... | Not Provided | 2026-03-19 | 2026-04-23 |
| CVE-2026-22560 json | An open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be redirected to arbitrary URLs by mani... | Not Provided | 2026-04-10 | 2026-04-14 |
| CVE-2026-1923 json | The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id�... | Not Provided | 2026-04-23 | 2026-04-23 |
| CVE-2025-60149 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps Notely note... | Not Provided | 2025-09-26 | 2026-04-23 |
| CVE-2025-59793 json | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated u... | Not Provided | 2026-02-17 | 2026-03-11 |
| CVE-2025-53452 json | Missing Authorization vulnerability in Barry Event Rocket event-rocket allows Exploiting Incorrectly Configured Access Contro... | Not Provided | 2025-09-22 | 2026-04-23 |
| CVE-2025-39366 json | Incorrect Privilege Assignment vulnerability in Rocket Apps wProject wproject.This issue affects wProject: from n/a through <... | Not Provided | 2025-05-19 | 2026-04-23 |
| CVE-2025-39365 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject wp... | Not Provided | 2025-05-19 | 2026-04-23 |
| CVE-2025-39350 json | Missing Authorization vulnerability in Rocket Apps wProject wproject.This issue affects wProject: from n/a through < 5.8.0. | Not Provided | 2025-05-19 | 2026-04-23 |