WP Rocket had a couple of a security issues reported publicly today. Both issues have been addressed and patched by our team and tools. 😮‍💨

Data exposure issue

One issue could have exposed account email addresses, license keys, and — on sites where those integrations are set up — Cloudflare and Sucuri API keys. Though most sites are using our WP Rocket license, some still had old data stored in the database.

WP Rocket released a patch for the vulnerability shortly after notified and there...

WP Rocket experienced a conflict with WordPress core 7.1 earlier this week that the WP Rocket team fixed in plugin version 3.23.2.2.

Our team reported the issue to WP Rocket and we were alerted by their team when the fix was released and also that WP Rocket needs to be updated before WP core is updated to 7.1.

If you manage your own updates…

It is safe to update WP Rocket to 3.23.2.2.

We recommend that you DO NOT update WordPress core to 7.1 yet. The recommended version is currently...

WordPress major core version 7.1 was released today including many new features, enhancements and bug fixes. As major released include a lot of changes, we recommend waiting to update. The current recommended core version is 7.0.4.

IF YOU MANAGE YOUR OWN UPDATES…

Wait to update WordPress core until we announce it’s safe to do so.

IF OUR TEAM MANAGES YOUR UPDATES…

We’ll observe a waiting period and monitor bug reports and do some testing before we begin updating sites to the latest...