Acato vulnerabilities
We track 2 vulnerabilities in Acato products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 25, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Acato vulnerabilities
- 7.1 High severity
WP REST Cache: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored XSS.This issue affects WP REST Cache: from n/a through <= 2026.1.0.
- 7.5 High severity
WP REST Cache: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Acato WP REST Cache wp-rest-cache allows PHP Local File Inclusion.This issue affects WP REST Cache: from n/a through <= 2025.1.0.