Skip to content

Product

wpfastestcache wp fastest cache vulnerabilities

29 published CVES affecting wpfastestcache wp fastest cache, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
29
Critical
2
High
6
Medium
21
Low
0
Unscored
0
CISA KEV
0

Latest wpfastestcache wp fastest cache CVEs

Newest publication first · page 1 of 2

  2. CVE-2021-24870 WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

    Published
    MediumCVSS 6.1 EPSS 0.25%

    The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set...

  3. CVE-2021-24869 WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection

    Published
    HighCVSS 8.8 EPSS 1.2%

    The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber

  5. CVE-2023-1375 WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion

    Published
    MediumCVSS 4.3 EPSS 0.53%

    The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability check in the deleteCacheToolbar function . This makes it possible for authenticated attackers, with subscriber-level permissi...

  6. CVE-2023-1938 WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF

    Published
    HighCVSS 8.8 EPSS 8.5%

    The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.