WordPress Plugin Vulnerabilities

WP Rocket < 3.23.5 - Unauthenticated Denial of Service

Description

The WP Rocket plugin for WordPress is vulnerable to Denial of Service in all versions up to 3.23.5. This is due to insufficient validation of user supplied input. This makes it possible for unauthenticated attackers to make the affected site unavailable.

Affects Plugins

Plugin icon
wp-rocket
Fixed in 3.23.5

References

CVE
CVE-2026-97076
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/aa8673fc-6fb3-4c1b-ae7c-3551ad63720a

Miscellaneous

Original Researcher
sahinyes
Verified
No
WPVDB ID
6bc42422-ef9f-4b5d-a61b-7f414f2b7b06

Timeline

Publicly Published
2026-10-07 (about 21 days ago)
Added
2026-10-14 (about 13 days ago)
Last Updated
2026-10-14 (about 13 days ago)

Other

Published
Title
Published
2026-09-24
Title
WP Store Locator < 3.0.0 - Unauthenticated Denial of Service
Published
2025-09-25
Title
Download After Email 2.1.5 - 2.1.6 - Unauthorized Repeated Form Submissions
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Published
2022-05-24
Title
Rating by BestWebSoft < 1.6 - Rating Denial of Service
Published
2020-10-29
Title
WordPress < 5.5.2 - Unauthenticated DoS Attack to RCE