WP Media
- Total products in the ecosystem
- 6
- Total vulnerabilities (90 days)
- 5
en
Verify to analyze this security profile
As of 10/27/2026, WP Media recorded 5 security vulnerabilities in the last 90 days across 3 products, including 3 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, WP Rocket had the most security vulnerabilities in the WP Media ecosystem, with 3 vulnerabilities—approximately 60% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97075WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerabilityCVE-2026-97076WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerabilityCVE-2026-105884WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-5934WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon EndpointCVE-2026-65443WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability7 Results | Page 1 of 1
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |