Rocket Apps

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Rocket Apps records in CISA KEV

No Rocket Apps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Open Graphite 1 record LOW

Records

5 records

TI-2025-26092 CVE-2025-39350 · GHSA-6r4g-8vrx-4gmq

WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability

MEDIUM 42

Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.0033 Published 2025-05-19 Fixed in 5.8.0 CWE-862

TI-2025-26108 CVE-2025-39366 · GHSA-crp9-8xr4-fg7p

WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability

MEDIUM 40

Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00359 Published 2025-05-19 Fixed in 5.8.0 CWE-266

TI-2025-26107 CVE-2025-39365 · GHSA-258r-rc8h-56rv

WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00233 Published 2025-05-19 Fixed in 5.8.0 CWE-79

TI-2022-23516 CVE-2022-47439 · GHSA-fmw5-f5r2-wh82

WordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Rocket Apps Open Graphite plugin <= 1.6.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-05-08 No fix listed CWE-79

TI-2025-37515 CVE-2025-60149 · GHSA-cgf7-528c-v2j6

WordPress Notely plugin <= 1.8.0 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps Notely notely allows Stored XSS.This issue affects Notely: from n/a through <= 1.8.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00225 Published 2025-09-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0