← Back

Wp Rocket

wp-rocket

Vendor: Wp Rocket • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-11658
1Wp Rocket
1Wp Rocket
May 13, 2026
Jul 26, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 by...Show more
In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.Show less