CVE-2026-5934

The WP Rocket plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.21.0.1. This is due to insufficient input sanitization and output escaping of user-supplied data via the rocket_beacon AJAX endpoint. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

• CWE-79

• https://github.com/wp-media/wp-rocket/releases/tag/v3.21.1
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3560bf50-2190-4469-9d92-b6b59f118324?source=cve

Published

Aug 28, 2026

Last Modified

Aug 28, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-59323An application using Micrometer Tracing with W3C baggage pro…5.3
• CVE-2026-59324When an IntegrationFlow uses .fluxTransform() with an asynch…8.2
• CVE-2026-59326The Spring Boot language server logs the raw value of the ht…3.3
• CVE-2026-59327Spring Tools for Eclipse stores the Spring Boot DevTools rem…4.4
• CVE-2026-59328Spring Tools for Eclipse renders Spring Boot starter wizard …4.2
• CVE-2026-59335Improper handling of case sensitivity (CWE-178) in the ident…8.7
• CVE-2026-59341A security vulnerability exists in the Sealed Secrets contro…4.2
• CVE-2026-5935IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9…9.8
• CVE-2026-59354In versions of Spring Security's OAuth2 Authorization Server…8.8
• CVE-2026-59355In versions of Spring Authorization Server 1.5.0 through 1.5…6.1
• CVE-2026-5936An attacker can control a server-side HTTP request by supply…9.8
• CVE-2026-5937Insufficient parameter verification leads to the occurrence …5.5