Skip to content
OpenAdvisories

Vendor

Acato

5 known vulnerabilities.

Products

WP REST Cache 3 Branded Social Images 1 Email Essentials 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-116862

    WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.

    Acato WP REST Cache
  • High 7.1
    CVE-2026-81764

    WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.

    Acato Email Essentials
  • High 7.1
    CVE-2026-25347

    WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored XSS.This issue affects WP REST Cache: from n/a through <= 2026.1.0.

    Acato WP REST Cache
  • High 7.5
    CVE-2025-52716

    WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache: from n/a through <= 2025.1.0.

    Acato WP REST Cache