WordPress plugin
WP REST Cache security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium1
- Low0
All WP REST Cache vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤2026.3.1Update to 2026.4.0 | CVE-2026-116862 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤2026.1.0Update to 2026.1.1 | CVE-2026-25347 | |
| High8.1 | Unauthenticated Local File Inclusion ≤2025.1.0Update to 2025.1.1 | CVE-2025-52716 |
- Medium5.3Missing Authorization
≤2026.3.1Update to 2026.4.0
- High7.2Unauthenticated Stored Cross-Site Scripting
≤2026.1.0Update to 2026.1.1
- High8.1Unauthenticated Local File Inclusion
≤2025.1.0Update to 2025.1.1
WP REST Cache: common questions
Does WP REST Cache have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WP REST Cache: 2 high, 1 medium. None are known to affect version null.
How do I check which version of WP REST Cache I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP REST Cache vulnerability?
CVE-2026-116862, published Oct 30, 2026: WP REST Cache <= 2026.3.1 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any WP REST Cache vulnerability listed in CISA KEV?
No. None of the known WP REST Cache vulnerabilities is currently listed in the CISA KEV catalog.