8.8
Élevée
CVE-2021-24869 The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before…
Description
The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Fastest Cache 0.9 | premières → < 0.9.5 | 0.9.5 |
Autres CVE de WP Fastest Cache
Les 6 CVE de WP Fastest Cache →
CVE-2026-74916
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its…
6.5
Moyenne
CVE-2026-74932
The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs…
7.5
Élevée
CVE-2021-24870
The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action,…
6.1
Moyenne
CVE-2023-6063
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it…
Non notée