The vulnerability allows a malicious subscriber to trigger a denial of service by exploiting the way WPBase Cache handles certain requests. The attacker can cause the plugin to consume excessive resources, making the site unavailable to legitimate users. The weakness is identified as CWE-770, representing insufficient resource limits.

WordPress sites running the baseapp WPBase Cache plugin version 5.5.6 or earlier.

The CVSS score of 6.5 indicates moderate severity. The EPSS score of < 1% suggests a very low but nonzero exploitation probability, and the vulnerability is not listed in the KEV catalog. Likely, an attacker would need to send crafted HTTP requests to the plugin’s endpoint, which is typically exposed through the public web interface, making the attack feasible from outside the network. There are no known mitigations aside from updating the plugin.