Vulnerabilities / Docket Cache / WPSEC-2026-1086
Docket Cache <= 26.04.09 - Unauthenticated Sensitive Information Exposure of WP-CLI OPcache Shared Secret
Medium 6.5
CWE-552Fixed in 26.04.10
- ID
- WPSEC-2026-1086
- Plugin
- Docket Cache – Object Cache Accelerator (docket-cache)
- Affected
- from 26.04.03 before 26.04.10
- Remediation
- Update to 26.04.10 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
- Weakness
- CWE-552
- Usage
- Plugin Low · Affected versions None seen among sites WPSec scans, 2026-10-16
- Attack surface
- Docket Cache on WPSec AttackSurface
- Fix released
- Published
Description
The Docket Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 26.04.03 up to, and including, 26.04.09, due to the WP-CLI OPcache shared secret being stored in a plain-text file under the web-accessible docket-cache-data/lock directory. The file has a predictable name, and the secret is created on any REST API request. This makes it possible for unauthenticated attackers to read the secret and send validly signed requests to the plugin's OPcache invalidation REST endpoint, for example to repeatedly reset the server's OPcache.
References
- https://wpsec.com/vuln/WPSEC-2026-1086/
- https://plugins.svn.wordpress.org/docket-cache/tags/26.04.10/
- https://wordpress.org/plugins/docket-cache/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS