Approved changes feed: RSS · Atom

cpe:2.3:a:rocket_apps:wproject:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRocket Apps (f462a789-5cae-540c-96ce-4911c95f6875)
ProductWproject (255a9788-cdf5-57b8-80eb-d9e3dbc72fca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-39366 vulnerable 2026-06-08 07:23:06.457556 WordPress wProject theme < 5.8.0 - Subscriber+ Privilege Escalation vulnerability
HIGH (8.8)
Incorrect Privilege Assignment vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.
Published: 2025-05-19T19:39:18.593Z
Updated: 2026-04-28T16:12:29.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39365 vulnerable 2026-06-08 07:23:06.457268 WordPress wProject theme < 5.8.0 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rocket Apps wProject allows Reflected XSS.This issue affects wProject: from n/a before 5.8.0.
Published: 2025-05-19T19:40:23.473Z
Updated: 2026-04-28T16:12:29.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39350 vulnerable 2026-06-08 07:23:06.424950 WordPress wProject theme < 5.8.0 - Unauthenticated Post/Comment/Attachment Modification/Deletion vulnerability
HIGH (8.2)
Missing Authorization vulnerability in Rocket Apps wProject.This issue affects wProject: from n/a before 5.8.0.
Published: 2025-05-19T19:50:15.064Z
Updated: 2026-04-28T16:12:29.328Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.