hostspa

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

hostspa records in CISA KEV

No hostspa vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-70244 CVE-2026-104021 · GHSA-hm53-mjmf-w6v4

Fastcache by Host.it: Authenticated .htaccess Code Injection

LOW 34

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[cache_cookie_exclude][]` parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00388 Published 2026-10-10 No fix listed CWE-94

TI-2026-76012 CVE-2026-107763 · GHSA-2x22-cf39-j42v

Fastcache by Host.it: Missing Authorization Allows .htaccess Cache Rule Changes

LOW 19

The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00213 Published 2026-10-17 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0