CVE-2026-97076: Wp Media Wp Rocket

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5.

Affected products

• Wp Media Wp Rocket: before 3.23.5 (fixed in 3.23.5)

Published 2026-10-09. Last modified 2026-10-09.