Vulnerabilities and security researches forwp-fastest-cache wp-fastest-cache

Direction: descending

Sep 02, 2026

WP Fastest Cache # CVE-2026-74916

CVE, Research URL: CVE-2026-74916
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Sep 01, 2026
Research Description: The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served from, the clean URL's cache entry to every subsequent visitor.
Affected versions: max 1.5.1.
Status: vulnerable

Aug 26, 2026

WP Fastest Cache # CVE-2026-74932

CVE, Research URL: CVE-2026-74932
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Aug 26, 2026
Research Description: The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references to a server they control and have arbitrary JavaScript run for every subsequent visitor.
Affected versions: max 1.5.1.
Status: vulnerable

WP Fastest Cache # CVE-2026-19760

CVE, Research URL: CVE-2026-19760
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: -
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.5.1 CVE-2026-19760
Affected versions: max 1.5.1.
Status: vulnerable

Jun 16, 2026

WP Fastest Cache # 3a131edbea817aa9b91f6d1fa7c9fdb087c5d125

CVE, Research URL: 3a131edbea817aa9b91f6d1fa7c9fdb087c5d125
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Oct 14, 2021
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 WordPress WP Fastest Cache plugin <= 0.9.4 - Authenticated SQL Injection (SQLi) vulnerability Authenticated SQL Injection (SQLi) vulnerability discovered by Marc Montpas (Jetpack Scan team) in WordPress WP Fastest Cache plugin (versions <= 0.9.4).
Affected versions: max 0.9.5.
Status: vulnerable

WP Fastest Cache # 344f03abb2cfaa7e34bc63e45c771413f9001e58

CVE, Research URL: 344f03abb2cfaa7e34bc63e45c771413f9001e58
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Feb 05, 2020
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server.
Affected versions: max 0.9.0.3.
Status: vulnerable

WP Fastest Cache # a2efd79f50457e817018a4eb311c463026613ee5

CVE, Research URL: a2efd79f50457e817018a4eb311c463026613ee5
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Feb 22, 2018
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 WP Fastest Cache <= 0.8.7.4 - SQL Injection The WP Fastest Cache plugin for WordPress is vulnerable to blind SQL Injection via the ‘$comment_id’ parameter in versions up to, and including, 0.8.7.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for subscriber-level attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Affected versions: max 0.8.7.5.
Status: vulnerable

WP Fastest Cache # f9ba8204c1465dc1158bf5cc56efc18a01b62ed3

CVE, Research URL: f9ba8204c1465dc1158bf5cc56efc18a01b62ed3
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Feb 26, 2018
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 WordPress WP Fastest Cache plugin <=0.8.7.4 - Blind SQL Injection (SQLi) vulnerability Blind SQL Injection (SQLi) vulnerability found in WordPress WP Fastest Cache plugin (versions <=0.8.7.4).
Affected versions: max 0.8.7.5.
Status: vulnerable

WP Fastest Cache # cade42a9e3b42294eca71dd715ca51c6dcb61b70

CVE, Research URL: cade42a9e3b42294eca71dd715ca51c6dcb61b70
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Oct 14, 2021
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 WordPress WP Fastest Cache plugin <= 0.9.4 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Marc Montpas (Jetpack Scan team) in WordPress WP Fastest Cache plugin (versions <= 0.9.4).
Affected versions: max 0.9.5.
Status: vulnerable

WP Fastest Cache # 05d18738c5b299aff2ff5178b199b5558f597bd0

CVE, Research URL: 05d18738c5b299aff2ff5178b199b5558f597bd0
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Feb 05, 2020
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 WordPress WP Fastest Cache plugin <= 0.9.0.2 - Cross-Site Request Forgery (CSRF) vulnerability Cross-Site Request Forgery (CSRF) vulnerability discovered by Glyn Wintle in WordPress WP Fastest Cache plugin (versions <= 0.9.0.2).
Affected versions: max 0.9.0.3.
Status: vulnerable

WP Fastest Cache # bd2c0889e81a092330d4eaa53459c9cf75ad0bff

CVE, Research URL: bd2c0889e81a092330d4eaa53459c9cf75ad0bff
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jun 20, 2017
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.5.5.9 WordPress WP Fastest Cache plugin <= 0.8.5.8 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities were found in WordPress WP Fastest Cache plugin <= v0.8.5.8. The settings are not sanitized and escaped so the plugin is prone to a Cross-Site Scripting (XSS) vulnerability. It also missing a nonce for the settings form. Update the plugin.
Affected versions: max 0.5.5.9.
Status: vulnerable

WP Fastest Cache # 10ef82b8a089650c6c6642d1b739e4c0eefc87f6

CVE, Research URL: 10ef82b8a089650c6c6642d1b739e4c0eefc87f6
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Nov 11, 2015
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.4.9 WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection WP Fastest Cache plugin's plugin to a blind SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Update the plugin.
Affected versions: max 0.8.4.9.
Status: vulnerable

WP Fastest Cache # 190eb3b3726e510d82f86d1fc5047a11793bbbf4

CVE, Research URL: 190eb3b3726e510d82f86d1fc5047a11793bbbf4
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jul 13, 2016
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.6.0 WP Fastest Cache <= 0.8.5.9 - Local File Inclusion The WP Fastest Cache plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 0.8.5.9 via the id POST parameter. This allows authenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. This is due to an impartial fix of https://ti.wordfence.io/vulnerabilities/3ebe25a7-fa4d-4e3f-b969-2ff3a8388b06.
Affected versions: max 0.8.6.0.
Status: vulnerable

WP Fastest Cache # 7229eb736945daae1be75d2c60a2e845c4730ce7

CVE, Research URL: 7229eb736945daae1be75d2c60a2e845c4730ce7
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: May 24, 2016
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 WordPress Fastest Cache Plugin <= 0.8.5.7 - Local File Inclusion This plugin is prone to a local file inclusion vulnerability. It allows attackers to execute code on the target web server or on a site visitor’s browser. Then they can steal data or perform a denial of service attacks. Update the plugin.
Affected versions: max 0.8.5.8.
Status: vulnerable

WP Fastest Cache # 6136c541513fdfdb3aef545a9918f73d35c7315b

CVE, Research URL: 6136c541513fdfdb3aef545a9918f73d35c7315b
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jul 13, 2016
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.6.0 WordPress Fastest Cache Plugin <= 0.8.5.9 - Local File Inclusion This plugin is prone to a local file inclusion vulnerability. It allows attackers to place an arbitrary PHP file on the target system. Update the plugin.
Affected versions: max 0.8.6.0.
Status: vulnerable

WP Fastest Cache # d35c2b5a51485eedeffdb52bf7a0b8f4be53bba6

CVE, Research URL: d35c2b5a51485eedeffdb52bf7a0b8f4be53bba6
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: May 24, 2016
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 WP Fastest Cache <= 0.8.5.7 - Local File Inclusion The WP Fastest Cache plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 0.8.5.7 via the 'id' parameter. This allows authenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
Affected versions: max 0.8.5.8.
Status: vulnerable

WP Fastest Cache # 64812f58057b173a1f005ec44e9bb8f7c7e7f8f4

CVE, Research URL: 64812f58057b173a1f005ec44e9bb8f7c7e7f8f4
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: May 23, 2016
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 WP Fastest Cache <= 0.8.5.7 - Missing Authorization The WP Fastest Cache plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the wpfc_save_cdn_integration_ajax_request_callback() function in versions up to, and including, 0.8.5.7. This makes it possible for unauthorized attackers to redirect all CSS file, image, video, etc. requests to a potentially malicious site.
Affected versions: max 0.8.5.8.
Status: vulnerable

WP Fastest Cache # 1fb5a8a0-4769-4e1a-9119-a63afd9364cc

CVE, Research URL: 1fb5a8a0-4769-4e1a-9119-a63afd9364cc
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: -
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 WP Fastest Cache < 0.9.0.3 - Cross-Site Request Forgery (CSRF) Arbitrary File Deletion The plugin did not have a CSRF nonce check on the "wpfc_delete_current_page_cache" action, allowing CSRF attacks against authenticated users to delete arbitrary files, including the wp-config.php file.
Affected versions: max 0.9.0.3.
Status: vulnerable

WP Fastest Cache # 8beb9013-b36d-4d2d-9042-f1053e2ccf21

CVE, Research URL: 8beb9013-b36d-4d2d-9042-f1053e2ccf21
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: -
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection Improper escaping of user input when deleting the cache of specific pages leads to SQL injection vulnerability. esc_sql() was used on input but the result was used unquoted in the constructed SQL query.
Affected versions: max 0.8.7.5.
Status: vulnerable

WP Fastest Cache # 1c9e81b9-8a7c-44ce-8c8d-2edb35ae44a1

CVE, Research URL: 1c9e81b9-8a7c-44ce-8c8d-2edb35ae44a1
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: -
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.9 WP Fastest Cache <= 0.8.5.9 - Local File Inclusion (LFI) The WP Fastest Cache WordPress plugin was affected by a Local File Inclusion (LFI) security vulnerability.
Affected versions: max 0.8.5.9.
Status: vulnerable

WP Fastest Cache # 12e48d35-fe72-4d6f-adc6-da41421d6239

CVE, Research URL: 12e48d35-fe72-4d6f-adc6-da41421d6239
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: -
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 WP Fastest Cache <= 0.8.5.7 - Local File Inclusion (LFI) The WP Fastest Cache WordPress plugin was affected by a Local File Inclusion (LFI) security vulnerability.
Affected versions: max 0.8.5.8.
Status: vulnerable

Feb 05, 2026

WP Fastest Cache # PSC-2026-64606

PSC, Research URL: PSC-2026-64606
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Feb 05, 2026
Research Description: WP Fastest Cache (v1.4.6) is a performance-focused WordPress caching and optimization plugin built to reduce server load, accelerate page delivery, and improve real-world metrics like Google PageSpeed and Core Web Vitals—and now it has also proven its security posture by successfully earning CleanTalk’s Plugin Security Certification (PSC-2026-64606), confirming that speed gains don’t come at the cost of safe code, safe defaults, and hardened behavior in high-traffic environments.
Affected versions: Min 1.5.2, max 1.5.2.
Status: SAFE & CERTIFIED

Jan 08, 2026

WP Fastest Cache # CVE-2025-10583

CVE, Research URL: CVE-2025-10583
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Dec 12, 2025
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'get_server_time_ajax_request' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
Affected versions: max 1.3.1.
Status: vulnerable

WP Fastest Cache # CVE-2025-10476

CVE, Research URL: CVE-2025-10476
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Nov 27, 2025
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfc_db_fix_callback() function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to initiate several database fix actions. This only affects sites with premium activated.
Affected versions: max 1.4.1.
Status: vulnerable

Oct 17, 2024

WP Fastest Cache # CVE-2020-36836

CVE, Research URL: CVE-2020-36836
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Oct 16, 2024
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server.
Affected versions: max 0.9.0.3.
Status: vulnerable

Jun 06, 2024

WP Fastest Cache # CVE-2021-20714

CVE, Research URL: CVE-2021-20714
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 27, 2021
Research Description: Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors.
Affected versions: max 0.9.1.7.
Status: vulnerable

WP Fastest Cache # CVE-2018-17586

CVE, Research URL: CVE-2018-17586
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 16, 2019
Research Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.
Affected versions: max 0.8.8.6.
Status: vulnerable

WP Fastest Cache # CVE-2018-17583

CVE, Research URL: CVE-2018-17583
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 16, 2019
Research Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.
Affected versions: max 0.8.8.6.
Status: vulnerable

WP Fastest Cache # CVE-2015-4089

CVE, Research URL: CVE-2015-4089
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Sep 19, 2017
Research Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the (1) saveOption, (2) deleteCache, (3) deleteCssAndJsCache, or (4) addCacheTimeout method via the wpFastestCachePage parameter in the WpFastestCacheOptions/ page.
Affected versions: max 0.8.3.5.
Status: vulnerable

WP Fastest Cache # CVE-2015-9316

CVE, Research URL: CVE-2015-9316
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Aug 14, 2019
Research Description: The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.
Affected versions: max 0.8.4.9.
Status: vulnerable

WP Fastest Cache # CVE-2019-13635

CVE, Research URL: CVE-2019-13635
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jul 30, 2019
Research Description: The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.
Affected versions: max 0.8.9.6.
Status: vulnerable

WP Fastest Cache # CVE-2019-6726

CVE, Research URL: CVE-2019-6726
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jul 29, 2019
Research Description: The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.
Affected versions: max 0.8.9.1.
Status: vulnerable

WP Fastest Cache # CVE-2018-17584

CVE, Research URL: CVE-2018-17584
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 16, 2019
Research Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.
Affected versions: max 0.8.8.6.
Status: vulnerable

WP Fastest Cache # CVE-2018-17585

CVE, Research URL: CVE-2018-17585
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 16, 2019
Research Description: The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.
Affected versions: max 0.8.8.6.
Status: vulnerable

WP Fastest Cache # CVE-2021-24870

CVE, Research URL: CVE-2021-24870
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jan 16, 2024
Research Description: The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload
Affected versions: max 0.9.5.
Status: vulnerable

WP Fastest Cache # CVE-2021-24869

CVE, Research URL: CVE-2021-24869
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jan 16, 2024
Research Description: The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
Affected versions: max 0.9.5.
Status: vulnerable

WP Fastest Cache # CVE-2023-1927

CVE, Research URL: CVE-2023-1927
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1926

CVE, Research URL: CVE-2023-1926
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1930

CVE, Research URL: CVE-2023-1930
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to delete caches.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1920

CVE, Research URL: CVE-2023-1920
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_purgecache_varnish_callback function. This makes it possible for unauthenticated attackers to purge the varnish cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1925

CVE, Research URL: CVE-2023-1925
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_clear_cache_of_allsites_callback function. This makes it possible for unauthenticated attackers to clear caches via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1919

CVE, Research URL: CVE-2023-1919
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_preload_single_save_settings_callback function. This makes it possible for unauthenticated attackers to change cache-related settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1375

CVE, Research URL: CVE-2023-1375
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Jun 09, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability check in the deleteCacheToolbar function . This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete the site's cache.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1922

CVE, Research URL: CVE-2023-1922
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_pause_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1923

CVE, Research URL: CVE-2023-1923
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_remove_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1921

CVE, Research URL: CVE-2023-1921
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_start_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1918

CVE, Research URL: CVE-2023-1918
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_preload_single_callback function. This makes it possible for unauthenticated attackers to invoke a cache building action via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1938

CVE, Research URL: CVE-2023-1938
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: May 30, 2023
Research Description: The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
Affected versions: max 1.1.5.
Status: vulnerable

WP Fastest Cache # CVE-2023-6063

CVE, Research URL: CVE-2023-6063
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Dec 05, 2023
Research Description: The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
Affected versions: max 1.2.2.
Status: vulnerable

WP Fastest Cache # CVE-2024-4347

CVE, Research URL: CVE-2024-4347
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: May 23, 2024
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the affected site or other sites in a shared hosting environment.
Affected versions: max 1.2.7.
Status: vulnerable

WP Fastest Cache # CVE-2023-1929

CVE, Research URL: CVE-2023-1929
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to purge the varnish cache.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1924

CVE, Research URL: CVE-2023-1924
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_toolbar_save_settings_callback function. This makes it possible for unauthenticated attackers to change cache settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1928

CVE, Research URL: CVE-2023-1928
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_preload_single_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiate cache creation.
Affected versions: max 1.1.3.
Status: vulnerable

WP Fastest Cache # CVE-2023-1931

CVE, Research URL: CVE-2023-1931
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Date: Apr 07, 2023
Research Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache deletion.
Affected versions: max 1.1.3.
Status: vulnerable