CVE-2026-39767
Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Patchstack

Description
Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-19
AI Q&A
2026-10-06
EPSS Evaluated
2026-10-18
NVD
CVE-2026-39767
EUVD
EUVD-2026-93274

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
baseapp WPBase Cache n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Subscriber Denial of Service (DoS) attack affecting the WPBase Cache plugin for WordPress, versions 5.5.6 and below. It allows attackers with Subscriber-level access to exploit insecure design flaws to overwhelm a website, causing slowdowns or crashes.

Detection Guidance

Monitor for unusual traffic patterns or slowdowns on your WordPress site, particularly if the WPBase Cache plugin is installed. Check server logs for repeated requests that may indicate a DoS attempt targeting the plugin. No specific commands are provided in the available resources.

Impact Analysis

The vulnerability can lead to website performance degradation or complete crashes, making it unavailable to legitimate users. Attackers could target multiple sites in mass campaigns, increasing the risk of prolonged downtime.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a Denial of Service attack that disrupts service availability rather than exposing or leaking sensitive data. However, prolonged downtime could impact service-level agreements or operational continuity, potentially leading to indirect compliance issues.

Mitigation Strategies

Apply the mitigation rule provided by Patchstack to block attacks until an official patch is released. Consider temporarily disabling the WPBase Cache plugin if no mitigation is available. Seek assistance from your hosting provider or a developer for further guidance.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-39767. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart