Wpfastestcache Wp_fastest_cache
29 CVEs affecting Wpfastestcache Wp_fastest_cache. Latest disclosed: 2024-10-16. Critical: 2, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9316 | Critical | 9.8 | 2019-08-14 | The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id paramete… |
CVE-2019-13635 | Critical | 9.1 | 2019-07-30 | The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal. |
CVE-2021-24869 | High | 8.8 | 2024-01-16 | The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to… |
CVE-2023-1938 | High | 8.8 | 2023-05-30 | The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remot… |
CVE-2018-17584 | High | 8.8 | 2019-04-15 | The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page. |
CVE-2015-4089 | High | 8.8 | 2017-09-19 | Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPr… |
CVE-2020-36836 | High | 8.0 | 2024-10-16 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capa… |
CVE-2023-6063 | High | 7.5 | 2023-12-04 | The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injec… |
CVE-2021-20714 | Medium | 6.5 | 2021-04-27 | Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary file… |
CVE-2019-6726 | Medium | 6.5 | 2019-07-29 | The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_f… |
CVE-2021-24870 | Medium | 6.1 | 2024-01-16 | The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some… |
CVE-2018-17586 | Medium | 6.1 | 2019-04-15 | The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action. |
CVE-2018-17585 | Medium | 6.1 | 2019-04-15 | The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter. |
CVE-2018-17583 | Medium | 6.1 | 2019-04-15 | The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action. |
CVE-2023-1375 | Medium | 4.3 | 2023-06-09 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability chec… |
CVE-2023-1931 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function… |
CVE-2023-1930 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_cal… |
CVE-2023-1929 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_call… |
CVE-2023-1928 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_preload_single_callback… |
CVE-2023-1927 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |