[ Vendor · 4 CVEs ]
WP Media
CVEs affecting WP Media published in the last 30 days, plus any WP Media CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100196 | 10 Oct 2026 | CVSS 7.2 | wp_media LazyLoad Plugin – Lazy Load Images, Videos, and IframesThe LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | |
| CVE-2026-97075 | 9 Oct 2026 | CVSS 6.5 | WP Media WP RocketMissing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-97076 | 9 Oct 2026 | CVSS 7.5 | WP Media WP RocketExecutable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before… | |
| CVE-2026-105884 | 7 Oct 2026 | CVSS 6.5 | WP Media Rocket Lazy LoadImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media Rocket Lazy Load rocket-lazy-load… |