Vulnerabilities

TI-2024-28951 CVE-2024-43299 · GHSA-2gg8-w5vr-ghvj

WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through <= 1.1.8.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0018 Published 2024-08-26 No fix listed CWE-352

TI-2023-06045 CVE-2023-6598 · GHSA-2hq6-33g7-497g

SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

LOW 20

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_set…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00355 Published 2024-01-11 No fix listed CWE-862

TI-2023-27156 CVE-2023-49746 · GHSA-mw2p-j3f6-xvpm

WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)

LOW 22

Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00324 Published 2023-12-07 No fix listed CWE-918

Vulnerabilities

Filters

WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update

WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)