Acato

Products

ProductCVEsExploitedLatest
WP REST Cache3–Oct 30, 2026
Branded Social Images1–Dec 9, 2024
Email Essentials1–Aug 31, 2026

Exploited and recent CVEs

  • CVE-2026-116862 High 7.5 WordPress WP REST Cache plugin <= 2026.3.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-81764 High 7.1 WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-25347 High 7.1 WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-52716 High 7.5 WordPress WP REST Cache <= 2025.1.0 - Local File Inclusion Vulnerability 0.6%
  • CVE-2023-28536 Medium 5.3 WordPress Branded Social Images plugin <= 1.1.0 - Broken Access Control vulnerability 0.4%