rockiger
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ReactPress | 1 | – | Aug 13, 2026 |
| ReactPress – Create React App for WordPress | 1 | – | Sep 30, 2026 |
Exploited and recent CVEs
- CVE-2026-92712 ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter 0.2%
- CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability 0.2%