Vulnerabilities

TI-2025-36004 CVE-2025-58199 · GHSA-v839-jwrx-g78c

WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Fastly Fastly fastly allows Cross Site Request Forgery.This issue affects Fastly: from n/a through <= 1.2.28.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-22 No fix listed CWE-352

TI-2025-07937 CVE-2025-8671

A mismatch caused by client-triggered server-sent stream resets between HTTP/2…

HIGH 72

A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to d…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03637 Published 2025-08-13 Fixed in 15-SP5, 15 SP5 +1 CWE-404

TI-2024-25632 CVE-2024-38375 · GHSA-mp3g-vpm9-9vqv

@fastly/js-compute use-after-free in some host call implementations

LOW 24

@fastly/js-compute is a JavaScript SDK and runtime for building Fastly Compute applications.

CVSS 3.1MEDIUM 5.3 Network High privileges User interaction EPSS 0.00266 Published 2024-06-26 Fixed in 3.16.0 CWE-416

TI-2024-23058 CVE-2024-34768 · GHSA-vx48-f47g-5gxg

WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2024-06-11 No fix listed CWE-862

TI-2024-23090 CVE-2024-34803 · GHSA-mh9w-chrg-w8jh

WordPress Fastly plugin <= 1.2.25 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Fastly.This issue affects Fastly: from n/a through 1.2.25.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00277 Published 2024-06-03 No fix listed CWE-862

TI-2015-08022 CVE-2015-10094 · GHSA-qgmh-mvg7-xxq4

Fastly Plugin api.php post cross site scripting

LOW 28

A vulnerability was found in Fastly Plugin up to 0.97 on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00545 Published 2023-03-06 No fix listed CWE-79

TI-2022-18597 CVE-2022-39218 · GHSA-cmr8-5w4c-44v8

Random number seed fixed during compilation

MEDIUM 41

The JS Compute Runtime for Fastly's Compute@Edge platform provides the environment JavaScript is executed in when using the Compute@Edge JavaScript SDK.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2022-09-20 Fixed in 0.5.3 CWE-335

TI-2017-10034 CVE-2017-13761 · GHSA-vpq9-c67q-23fq

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party…

LOW 31

The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involvi…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01222 Published 2017-09-14 Fixed in 1.2.26 CWE-200

Vulnerabilities

Filters