WP Media WP Rocket

• CVE-2026-97075 Medium 6.5 WordPress WP Rocket plugin < 3.23.5 - Broken Access Control vulnerability 0.2%
• CVE-2026-97076 High 7.5 WordPress WP Rocket plugin < 3.23.5 - Denial of Service Attack vulnerability 0.3%
• CVE-2026-5934 High 7.2 WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint 0.3%
• CVE-2026-28044 Medium 5.9 WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability 0.1%