PLUGIN SECURITY
Is Wp Rocket safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Wp Rocket WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
wp-rocket
Known vulnerabilities
- CVE-2017-11658 — WP Rocket [wp-rocket] < 2.10.4 (Path Traversal) · High
- WP Rocket [wp-rocket] < 2.10.4
- CVE-2026-28044 — WP Rocket [wp-rocket] < 3.20.0.2 (XSS) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.