Cache Enabler

Cache Enabler has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 9.1, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is External Control Of File Name Or Path, behind 1 of the records (100%).

The one issue recorded for Cache Enabler has a vendor fix available, so running the current release closes it.

All of these findings were reported by Jakub Herman. Cache Enabler is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSCritical
9.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Cache Enabler vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2026-19253

Cache Enabler <= 1.8.16 - Unauthenticated Arbitrary File and Directory Deletion

Read the full analysis

Vulnerability Records

1 records
Cache Enabler banner
Latestv1.8.17

Cache Enabler

KeyCDN

Author

KeyCDN

4.3(139)
86/100
Last Updated
2026-09-27 (22d ago)
Active Installs
100,000+
Downloads
2,791,640
Requires WP
5.1+
Requires PHP
5.6+
Tested up to
WP 7.1.3
Created
2015-10-21 (11y ago)

Cache Enabler is a simple, yet powerful WordPress caching plugin that is easy to use, needs minimal configuration, and best of all helps improve site performance for a faster load time. It creates static HTML files of frontend pages and stores them on the server’s disk. This allows the static HTML files to be delivered instead of generating pages on the fly, avoiding resource intensive backend processes from the WordPress core, plugins, and database. Features Fast and efficient cache engine Automatic smart cache clearing Manual cache clearing WP-CLI cache clearing Cache expiry WebP support (convert images to WebP with Optimus) Mobile support Brotli and Gzip pre-compression support Minification of HTML excluding or including inline CSS and JavaScript Real-time cache size display in the WordPress dashboard Custom post type support 304 Not Modified support Works perfectly with Autoptimize How does the caching work? Cache Enabler captures page contents and saves it as a static HTML file on the server’s disk. The static HTML file created can be one of several possible cache versions depending on the plugin settings and HTTP request. Accepted static HTML files are then delivered without any database queries or on the fly compression, allowing for a quicker page load. Documentation Installation Settings Hooks WP-CLI Advanced configuration FAQ Want to help? Want to file a bug, contribute some code, or improve translations? Excellent! Check out our GitHub issues or translations. Maintainer KeyCDN

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C