softaculous SpeedyCache vulnerabilities

Latest softaculous SpeedyCache CVEs

Newest publication first

1. CVE-2024-43299 WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2024-08-26

   Medium·CVSS 5.4 EPSS 0.18%

   Cross-Site Request Forgery (CSRF) vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through <= 1.1.8.

2. CVE-2023-6598 SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

   Published 2024-01-11

   Medium·CVSS 4.3 EPSS 0.36%

   The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_settings, and speedycache_preloading_delete_resource functions...

3. CVE-2023-49746 WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)

   Published 2023-12-07

   Medium·CVSS 4.3 EPSS 0.32%

   Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.