rockiger vulnerabilities

Products

• akiee 1
• ReactPress 1
• ReactPress – Create React App for WordPress 1

Latest rockiger CVEs

Newest publication first

1. CVE-2026-92712 ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter

   Published 2026-09-30

   Medium·CVSS 6.4 EPSS 0.19%

   The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authe...

2. CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability

   Published 2026-08-13

   Medium·CVSS 6.0 EPSS 0.21%

   Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.

3. CVE-2018-1000543 Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code e...

   Published 2018-06-26

   Medium·CVSS 6.1 EPSS 1.2%

   Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution. This attack appear to be exploitable via The attacker tricks the victi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.