w
wp media
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 19, 2025 to present
4
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
45/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
0High
1Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
CSRF
1
Most Affected Products
1. WP Media Rocket Lazy Load1
2. WP Media WP Rocket1
3. WP Media WP File Download1
4. JoomUnited Wp File Download Wordpress1
5. WP Media Category Management1
Recent Vulnerabilities
See more →CVE-2026-105884
CVSS 6.5medium
WordPress Rocket Lazy Load plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
Oct 7, 2026🔧 No Patch
CVE-2026-28044
CVSS 5.9medium
WordPress WP Rocket plugin <= 3.19.4 - Cross Site Scripting (XSS) vulnerability
Mar 19, 2026
CVE-2025-5034
CVSS 7.1EPSS 0%high
WP File Download < 6.2.6 - Reflected XSS
Jun 21, 2025🔧 No Patch
CVE-2025-0865
CVSS 6.5medium
WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update
Feb 19, 2025
Monitor wp media in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.