PHP Remote File Inclusion Flaw in Acato WP REST Cache by Acato

CVE-2025-52716

What is CVE-2025-52716?

A vulnerability exists in the Acato WP REST Cache plugin that allows for improper control over the filename used in include or require statements. This flaw leads to PHP local file inclusion, which poses significant security risks by enabling unauthorized access to sensitive files on the server. Affected versions range from n/a to 2025.1.0, necessitating immediate attention to secure installations and prevent potential exploitation.

References