Socialrocket
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Social Rocket – Social Sharing Plugin | 3 | – | Apr 23, 2026 |
| Social Rocket | 1 | – | Oct 6, 2026 |
Exploited and recent CVEs
- CVE-2026-42418 WordPress Social Rocket plugin <= 1.3.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-1923 Social Rocket – Social Sharing Plugin <= 1.3.4.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via id 0.2%
- CVE-2024-9702 Social Rocket <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
- CVE-2024-9697 Social Rocket – Social Sharing Plugin <= 1.3.4 - Missing Authorization to Settings Update 0.4%