WPBase Cache
WPBase Cache has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.
The most common weakness is Uncontrolled Resource Consumption, behind 1 of the records (100%).
The one issue recorded for WPBase Cache has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by dodoh4t. WPBase Cache is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.10.
CVE-2026-39767WPBase Cache <= 5.5.6 - Authenticated (Subscriber+) Denial of Service
Read the full analysisVulnerability Records
WPBase Cache
Author
baseapp
Plugin is developed to optimize wordpress deployment on varnish + nginx + php-fpm + php-apc server stack using three type of caches full page cache, db cache and opcode cache. This plugin includes nginx-compatibility, db-cache-reloaded-fix for nginx and database cache. This plguin also support varnish cache management with given default.vcl. We have included sample file for nginx and varnish configurations in utils folder. This plugin will automatically invalidate caches upon certain actions from wordpress admin panel. Thanks to: Ivan Kristianto Vladimir Kolesnikov Visit our blog for more information on deployment of wordpress on varnish, nginx and php-fpm stack at WPOven Blog. Please note that generally shared hosting don’t have varnish + nginx as server software so this plugin will not work on shared hostings.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C