softaculous SpeedyCache – Cache, Optimization, Performance vulnerabilities

Latest softaculous SpeedyCache – Cache, Optimization, Performance CVEs

Newest publication first

1. CVE-2026-104006 SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check

   Published 2026-10-10

   Low·CVSS 3.7 EPSS 0.26%

   The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'comment_author_, comment_author_email_' parameter. This makes it possible for unauthenticated attackers to...

2. CVE-2026-5114 SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read

   Published 2026-07-28

   Medium·CVSS 4.9 EPSS 0.50%

   The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation (which allows query strings like .css?...) and path resolution (which strips query string...

3. CVE-2023-6598 SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

   Published 2024-01-11

   Medium·CVSS 4.3 EPSS 0.36%

   The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_settings, and speedycache_preloading_delete_resource functions...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.