Wp Media

9 CVEs across 5 Wp Media products. Browse Wp Media vulnerabilities, severities, and proof-of-concept exploits.

Wp Media products with known CVEs

ProductCVEs
Wp Rocket4
Search \& Replace2
Adminimize1
Backwpup1
Rocket Lazy Load1
Wp Media CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-97075Medium6.52026-10-09Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-97076High7.52026-10-09Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.
CVE-2026-105884Medium6.52026-10-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored…
CVE-2026-5934High7.22026-08-28The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input s…
CVE-2026-65443High7.12026-07-27Unauthenticated Cross Site Scripting (XSS) in BackWPup <= 5.7.4 versions.
CVE-2026-49045Medium4.32026-05-27Missing Authorization vulnerability in WP Media Adminimize allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Adminim…
CVE-2026-28044Medium5.92026-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media WP Rocket allows Stored XSS.This issue affects W…
CVE-2024-38759Medium5.42024-07-22Deserialization of Untrusted Data vulnerability in WP MEDIA SAS Search & Replace search-and-replace.This issue affects Search & Replace: from n/a through 3.2.2.
CVE-2024-4145High7.22024-06-13The Search & Replace WordPress plugin before 3.2.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL…