Acato vulnerabilities
Published CVEs affecting Acato products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-81764
High · 7.1
CWE-79 Aug 31, 2026
WordPress Email Essentials plugin <= 6.0.6 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Email Essentials <= 6.0.6 versions.
CVE-2026-25347
High · 7.1
CWE-79 Mar 25, 2026
WordPress WP REST Cache plugin <= 2026.1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Acato WP REST Cache wp-rest-cache allows Stored XSS.This issue affects WP REST Cache: from n/a through <= 2026.1.0.