softaculous

Records53All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

softaculous records in CISA KEV

No softaculous vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webuzo 6 records MEDIUM Backuply 3 records MEDIUM Speedycache 3 records LOW Ampps 1 record HIGH Softaculous 1 record LOW Whmcs Reseller Module 1 record MEDIUM

Records

3 records in Speedycache · all components

TI-2024-28951 CVE-2024-43299 · GHSA-2gg8-w5vr-ghvj

WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through <= 1.1.8.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0018 Published 2024-08-26 No fix listed CWE-352

TI-2023-27156 CVE-2023-49746 · GHSA-mw2p-j3f6-xvpm

WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)

LOW 22

Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00324 Published 2023-12-07 No fix listed CWE-918

TI-2023-06045 CVE-2023-6598 · GHSA-2hq6-33g7-497g

SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

LOW 20

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_set…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00355 Published 2024-01-11 No fix listed CWE-862

Open these records in search →

Critical	5
High	16
Medium	31
Low	1
No CVSS	0