plugin

Ft Rockpress Vulnerabilities

2 known security issues reported for the Ft Rockpress WordPress plugin. Most recent disclosed Mar 20, 2026.

2 medium

Running Ft Rockpress on your site? Check whether your installed version is affected.

Scan your site free

RockPress - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions vulnerability

medium

Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions vulnerability

CVSS:
5.4
Affected:
up to 1.0.17
Fixed in:
1.0.18
Disclosed:
Mar 20, 2026

RockPress <= 1.0.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via AJAX Actions

medium

The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missing capability checks on multiple AJAX actions (rockpress_import, rockpress_import_status, rockpress_last_import, rockpress_reset_import, and rockpress_check_services) combined with...

CVSS:
5.3
Affected:
up to 1.0.17
Fixed in:
1.0.18
Disclosed:
Mar 19, 2026

CVE-2026-3550 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database