8.8
Élevée
CVE-2023-1938 The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate…
Description
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Fastest Cache 1.1 | premières → < 1.1.5 | 1.1.5 |
Autres CVE de WP Fastest Cache
Les 6 CVE de WP Fastest Cache →
CVE-2026-74916
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its…
6.5
Moyenne
CVE-2026-74932
The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs…
7.5
Élevée
CVE-2021-24870
The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action,…
6.1
Moyenne
CVE-2021-24869
The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before…
8.8
Élevée