SZB-145ae2c0b8
EUVD lists unauthenticated broken access control in WP REST Cache up to 2026.3.1 (EUVD-2026-114313)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Acato
- Product
- WP REST Cache
- First seen
Summary
The EU Vulnerability Database (EUVD) lists an unauthenticated Broken Access Control flaw in WP REST Cache versions 2026.3.1 and earlier, scored 7.5/10 under CVSS v3.1. The item is an automated EUVD alert and does not describe exploitation.
If you use Acato
Check whether WP REST Cache 2026.3.1 or earlier is installed
Update to a fixed release once available
Clear cached REST responses that may contain private data after patching
What the sources say 1
· Mastodon: “Unauthenticated Broken Access Control in WP REST Cache <= 2026.3.1 versions.” Source