APCu Manager
APCu Manager has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for APCu Manager has a vendor fix available, so running the current release closes it.
All of these findings were reported by Alessandro Greco (Aleff). APCu Manager is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.1.
CVE-2026-10083APCu Manager <= 4.4.0 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records
APCu Manager
Author
Pierre Lannoy
APCu statistics and management right in the WordPress admin dashboard. APCu Manager offers a persistent object cache backend to WordPress: just activate the option in the settings and you will experience a real speed up of your site or network. APCu Manager is a full featured APCu management and analytics reporting tool. It allows you to monitor and optimize APCu operations on your WordPress site or network. APCu Manager works on dedicated or shared servers. It is compatible with all plugins using WordPress object caching. Its main management features are: drop-in replacement for WordPress object caching; individual object deletion; bulk object deletion; objects browsing and inspecting; smart garbage collection; full cache clearing. ⚠️ APCu Manager doesn’t work on PHP clustered environments! APCu Manager is also a full featured analytics reporting tool that analyzes all APCu operations on your site. It can report: KPIs: hit ratio, free memory, cached objects, keys saturation, memory fragmentation and availability; metrics variations; metrics distributions; plugins consumption. APCu Manager supports multisite report delegation (see FAQ). APCu Manager supports a set of WP-CLI commands to: toggle on/off main settings – see wp help apcu settings for details; obtain operational statistics – see wp help apcu analytics for details. For a full help on WP-CLI commands in APCu Manager, please read this guide. APCu Manager is part of PerfOps One, a suite of free and open source WordPress plugins dedicated to observability and operations performance. APCu Manager is a free and open source plugin for WordPress. It integrates many other free and open source works (as-is or modified). Please, see ‘about’ tab in the plugin settings to see the details. Support This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin. Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Please read carefully the FAQ at the bottom of this page before requesting support. Privacy This plugin, as any piece of software, is neither compliant nor non-compliant with privacy laws and regulations. It is your responsibility to use it with respect for the personal data of your users and applicable laws. This plugin doesn’t set any cookie in the user’s browser. This plugin doesn’t handle personally identifiable information (PII). Donation If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to La Quadrature Du Net or the Electronic Frontier Foundation which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C