Skip to content
PluginCanary

WP REST Cache

by Acato · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 6 days ago, no open vulnerabilities.

91/ 100Healthy
Canary Score

Based on 3 of 5 areas

Sub-scores for WP REST Cache
Ownership100
Maintenance100
Security75
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 3 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is WP REST Cache still maintained?
Yes. Last release 30 Oct 2026, 21 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns WP REST Cache, and has it changed hands?
No change recorded. Main committer acato since Jan 2019. 4 Nov 2026 · SVN log
Was WP REST Cache removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WP REST Cache safe?
3 known vulnerabilities, all fixed (latest in 2026.4.0). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest WP REST Cache update safe to install?
No ownership change before 2026.4.2. No one-star spike after it. 30 Oct 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master30 Jan 2019 to 30 Jan 2019, 1 commits
acato31 Jan 2019 to 30 Oct 2026, 80 commits

2 committers recorded. No ownership changes recorded since 2019.

Maintenance

Last release
6 days ago
Releases, 24 months
21
Tested up to
7.0 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for WP REST Cache
Q1 20244
Q2 20240
Q3 20244
Q4 20241
Q1 20250
Q2 20255
Q3 20253
Q4 20252
Q1 20264
Q2 20261
Q3 20262
Q4 20263

Last release 30 Oct 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

Resolved, last 2 months
100%
Threads, last 2 months
1

Trend appears after 8 weekly snapshots.

Security record

3 vulnerabilities in 24 months, all patched (latest fixed in 2026.4.0).

Show 3 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Missing Authorization5.3<= 2026.3.12026.4.0Before disclosure
23 Mar 2026Unauthenticated Stored Cross-Site Scripting7.2<= 2026.1.02026.1.1Before disclosure
28 Jul 2025Unauthenticated Local File Inclusion8.1<= 2025.1.02025.1.1Before disclosure

Changelog mentions of security fixes: 2026.4.0 (security, authorization, nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.9.

Last 90 days vs lifetime average rating for WP REST Cache
Last 90 daysNo reviews
Lifetime4.9
Average rating per quarter
Average rating per quarter for WP REST Cache
Q1 20245.0
Q2 20245.0
Q2 20255.0
Q3 20255.0
Q4 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2025.

Rating distribution
5 star38
4 star3
3 star1
2 star0
1 star0

Momentum

Active installs
10,000+
Downloads, last full week
9,470
Weekly downloads, last 26 complete weeks
Weekly downloads for WP REST Cache
4 May 2026331
11 May 2026835
18 May 20263,983
25 May 20261,483
1 Jun 20261,427
8 Jun 20261,136
15 Jun 20261,130
22 Jun 2026881
29 Jun 20261,062
6 Jul 20261,097
13 Jul 20261,360
20 Jul 20265,210
27 Jul 20262,374
3 Aug 20261,899
10 Aug 20261,302
17 Aug 20261,328
24 Aug 20261,158
31 Aug 20261,298
7 Sep 20261,272
14 Sep 20261,414
21 Sep 20261,418
28 Sep 20261,517
5 Oct 20261,268
12 Oct 20261,186
19 Oct 20261,867
26 Oct 20269,470

Weekly downloads over the last 4 weeks are 84% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Nginx HelperScore 95 · 200,000+Cache EnablerScore 95 · 100,000+Proxy Cache PurgeScore 95 · 50,000+

Facts

Version
2026.4.2
Author
Acato
Added
31 Jan 2019
Last updated
30 Oct 2026
Active installs
10,000+
Requires WordPress
4.7
Tested up to
7.0.8
Requires PHP
7.0
Category
Performance & Optimization > Caching Solutions
Tags
api, rest, cache, rest cache, wp-rest-api

Other plugins by this author: WP REST Yoast Meta, Branded Social Images, Disable Meta Box Resizing, Email Essentials, Block Editor Templates, Acato Readable List Tables, Revision Retention

Questions about WP REST Cache

Is WP REST Cache still maintained?

Yes. Last release 30 Oct 2026, 21 releases in the last 24 months.

Who owns WP REST Cache, and has it changed hands?

No change recorded. Main committer acato since Jan 2019.

Was WP REST Cache removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WP REST Cache safe?

3 known vulnerabilities, all fixed (latest in 2026.4.0). Not on the exploited list.

Is the latest WP REST Cache update safe to install?

No ownership change before 2026.4.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue