WordPress plugin

WordPress RokBox security & vulnerabilities

Q: Is any WordPress RokBox vulnerability listed in CISA KEV?

No. None of the known WordPress RokBox vulnerabilities is currently listed in the CISA KEV catalog.

wp_rokbox— active installsLast vulnerability Dec 17, 2012

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

7Known vulnerabilities

Critical2
High2
Medium3
Low0

Vulnerabilities per year

All WordPress RokBox vulnerabilities

WordPress RokBox vulnerabilities
Severity	Vulnerability	CVE	Published
Critical9.1	Content Spoofing ≤2.13No patch available	—	Dec 17, 2012
Critical9.8	Arbitrary File Upload ≤2.13No patch available	—	Dec 17, 2012
High7.5	Full Path Disclosure ≤2.13No patch available	—	Dec 17, 2012
Medium5.3	Sensitive Data Disclosure ≤2.13No patch available	—	Dec 17, 2012
High7.5	Denial of Service ≤2.13No patch available	—	Dec 17, 2012
Medium6.1	Cross-Site Scripting ≤2.13No patch available	—	Dec 17, 2012
Medium5.3	Abuse of Functionality ≤2.13No patch available	—	Dec 17, 2012

Critical9.1
Content Spoofing
≤2.13No patch available
366e5302-3edc-4bc8-8d84-9e0ee7abb25aDec 17, 2012
Critical9.8
Arbitrary File Upload
≤2.13No patch available
3b4e92a1-cac7-445d-a47c-52058e652c09Dec 17, 2012
High7.5
Full Path Disclosure
≤2.13No patch available
581792f3-7b57-418c-802b-2ff04f5b83bfDec 17, 2012
Medium5.3
Sensitive Data Disclosure
≤2.13No patch available
a63f0b4b-ad8f-4daf-9450-133bf08c2de1Dec 17, 2012
High7.5
Denial of Service
≤2.13No patch available
ac27f20a-2048-46f3-b84f-43e2d4a345d2Dec 17, 2012
Medium6.1
Cross-Site Scripting
≤2.13No patch available
b2ef036e-14a5-40df-93c3-ab1a1d9accc0Dec 17, 2012
Medium5.3
Abuse of Functionality
≤2.13No patch available
ec2181cb-dfb2-43d5-90e8-c68d0d98c98bDec 17, 2012

WordPress RokBox: common questions

Does WordPress RokBox have known vulnerabilities?

Yes. VulnCrest Radar lists 7 known vulnerabilities in WordPress RokBox: 2 critical, 2 high, 3 medium. At least one is not fixed in the latest version.

How do I check which version of WordPress RokBox I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent WordPress RokBox vulnerability?

366e5302-3edc-4bc8-8d84-9e0ee7abb25a, published Dec 17, 2012: WordPress RokBox <= 2.13 - Content Spoofing. Severity: Critical (CVSS 9.1).

Is any WordPress RokBox vulnerability listed in CISA KEV?

No. None of the known WordPress RokBox vulnerabilities is currently listed in the CISA KEV catalog.