Wpfastestcache / WP Fastest Cache
29 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2020-36836 | WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion | HIGH | 8.1 | Oct 16, 2024 |
| CVE-2021-24870 | WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting | MEDIUM | 6.1 | Jan 16, 2024 |
| CVE-2021-24869 | WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection | HIGH | 8.8 | Jan 16, 2024 |
| CVE-2023-6063 | WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection | HIGH | 7.5 | Dec 4, 2023 |
| CVE-2023-1375 | WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion | MEDIUM | 4.3 | Jun 9, 2023 |
| CVE-2023-1938 | WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF | HIGH | 8.8 | May 30, 2023 |
| CVE-2023-1928 | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1929 | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1930 | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1931 | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1927 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1926 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1925 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1924 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1923 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1922 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1921 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1920 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1919 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2023-1918 | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback' | MEDIUM | 4.3 | Apr 6, 2023 |
| CVE-2021-20714 | Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary file… | MEDIUM | 6.5 | Apr 27, 2021 |
| CVE-2015-9316 | The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id paramete… | CRITICAL | 9.8 | Aug 14, 2019 |
| CVE-2019-13635 | The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal. | CRITICAL | 9.1 | Jul 30, 2019 |
| CVE-2019-6726 | The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_f… | MEDIUM | 6.5 | Jul 29, 2019 |
| CVE-2018-17586 | The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action. | MEDIUM | 6.1 | Apr 15, 2019 |
Showing 1 to 25 of 29 CVEs