TI-2026-83315 CVE-2026-116862 · GHSA-jc5f-7gjr-2qhp
Broken access control in WordPress WP REST Cache plugin
Priority LOW 39
Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.
Acato
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Acato records in CISA KEVNo Acato vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2025-32766 CVE-2025-52716 · GHSA-5pq8-f4px-5f77
WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache:…
TI-2026-56400 CVE-2026-81764 · GHSA-xvv3-94fm-vpp2
WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.
TI-2026-20465 CVE-2026-25347 · GHSA-xx28-crrx-45xc
WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored XSS.This issue affects WP REST Cache: from n/a through <= 2026.1.0.
TI-2023-13068 CVE-2023-28536 · GHSA-7r2c-x2h3-wr96
WordPress Branded Social Images plugin <= 1.1.0 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in Acato Branded Social Images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Branded Social Images: from n/a through 1.1.0.