# Docket Cache <= 26.04.07 - Unauthenticated Sensitive Information Exposure via Predictable Cache Log File

- **ID:** WPSEC-2026-0730
- **Plugin:** Docket Cache – Object Cache Accelerator (`docket-cache`), https://wordpress.org/plugins/docket-cache/
- **Affected versions:** all versions before 26.04.08
- **Fixed in:** 26.04.08 (Update to 26.04.08 or later.)
- **Severity:** Medium 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
- **Weakness:** CWE-532
- **Usage among sites WPSec scans:** plugin Low, affected versions None seen (as of 2026-10-10)
- **Attack surface analysis:** https://attacksurface.wpsec.com/plugin/docket-cache
- **Fix released:** 2026-10-08
- **Published:** 2026-10-10
- **URL:** https://wpsec.com/vuln/WPSEC-2026-0730/

## Description

The Docket Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 26.04.07. The cache log was written to a predictable file name (.object-cache.log) in the content directory, and it recorded full request URIs, including query string values such as tokens and other secrets. This makes it possible for unauthenticated attackers to download the log file and read sensitive data from other users' requests when the cache log feature is enabled and the file can be reached over the web.

## References

- https://wpsec.com/vuln/WPSEC-2026-0730/
- https://plugins.svn.wordpress.org/docket-cache/tags/26.04.08/
- https://wordpress.org/plugins/docket-cache/

Source: WPSec, https://wpsec.com/vuln/WPSEC-2026-0730/

License: CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Free to use, share and adapt, also commercially, if you credit WPSec and link to this advisory.