CVE-2020-36836
- EPSS 28.83%
- Veröffentlicht 16.10.2024 07:15:08
- Zuletzt bearbeitet 13.03.2025 13:30:11
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated ...
CVE-2021-24870
- EPSS 0.13%
- Veröffentlicht 16.01.2024 16:15:09
- Zuletzt bearbeitet 12.05.2025 15:15:54
The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high pr...
CVE-2021-24869
- EPSS 0.62%
- Veröffentlicht 16.01.2024 16:15:09
- Zuletzt bearbeitet 02.06.2025 16:15:23
The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
CVE-2023-6063
- EPSS 91.9%
- Veröffentlicht 04.12.2023 22:15:08
- Zuletzt bearbeitet 21.11.2024 08:43:04
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
CVE-2023-1375
- EPSS 0.05%
- Veröffentlicht 09.06.2023 06:15:56
- Zuletzt bearbeitet 21.11.2024 07:39:03
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability check in the deleteCacheToolbar function . This makes it possible for authenticated attackers, ...
CVE-2023-1938
- EPSS 7.13%
- Veröffentlicht 30.05.2023 08:15:09
- Zuletzt bearbeitet 10.01.2025 21:15:10
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
CVE-2023-1931
- EPSS 0.07%
- Veröffentlicht 06.04.2023 21:15:07
- Zuletzt bearbeitet 21.11.2024 07:40:09
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers...
CVE-2023-1930
- EPSS 0.07%
- Veröffentlicht 06.04.2023 21:15:07
- Zuletzt bearbeitet 21.11.2024 07:40:09
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_callback function in versions up to, and including, 1.1.2. This makes it possible for authenti...
CVE-2023-1929
- EPSS 0.07%
- Veröffentlicht 06.04.2023 21:15:07
- Zuletzt bearbeitet 21.11.2024 07:40:09
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_callback function in versions up to, and including, 1.1.2. This makes it possible for authentic...
CVE-2023-1928
- EPSS 0.07%
- Veröffentlicht 06.04.2023 21:15:07
- Zuletzt bearbeitet 21.11.2024 07:40:09
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_preload_single_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated...