Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP Fastest Cache 0.9.5 Clear all filters
TI-2021-07152 CVE-2021-24870 · GHSA-mvrw-4465-r2jc

WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

Priority MEDIUM 60

The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00252 Published 2024-01-16 Fixed in 0.9.5 CWE-352
TI-2021-07151 CVE-2021-24869 · GHSA-9mj4-2jjf-889w

WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection

Priority HIGH 73

The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as s…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01178 Published 2024-01-16 Fixed in 0.9.5 CWE-89