Browse all 4 CVE security advisories affecting WP Media. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-5934 | WP Rocket <= 3.21.0.1 - Unauthenticated Stored Cross-Site Scripting via Picture Source Attributes in rocket_beacon Endpoint — WP Rocket CWE-79 | 7.2 | High | 2026-08-28 |
| CVE-2026-65443 | WordPress BackWPup plugin <= 5.7.4 - Cross Site Scripting (XSS) vulnerability — BackWPup CWE-79 | 7.1 | High | 2026-07-27 |
| CVE-2026-49045 | WordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability — Adminimize CWE-862 | 4.3 | Medium | 2026-05-27 |
| CVE-2026-28044 | WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability — WP Rocket CWE-79 | 5.9 | Medium | 2026-03-19 |
This page lists every published CVE security advisory associated with WP Media. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.