Skip to content
Noroxi

wpfastestcache records

29 published records for vendor wpfastestcache.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 3.4%
Pre-auth RCE
0
With a fix record
13.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 21
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

29 records
  • CVE-2023-6063
    52Plan

    WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

    HighCVSS 7.5WeaponizedEPSS 74%

    wpfastestcache · wp fastest cacheDec 4, 2023

  • CVE-2019-13635
    49Plan

    The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.

    CriticalCVSS 9.1No exploitEPSS 44%

    wpfastestcache · wp fastest cacheJul 30, 2019

  • CVE-2015-9316
    40Plan

    The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via t

    CriticalCVSS 9.8No exploitEPSS 3%

    wpfastestcache · wp fastest cacheAug 14, 2019

  • CVE-2023-1938
    38Monitor

    WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF

    HighCVSS 8.8No exploitEPSS 8%

    wpfastestcache · wp fastest cacheMay 30, 2023

  • CVE-2021-24869
    35Monitor

    WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    wpfastestcache · wp fastest cacheJan 16, 2024

  • CVE-2015-4089
    35Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before

    HighCVSS 8.8No exploitEPSS 1%

    wpfastestcache · wp fastest cacheSep 19, 2017

  • CVE-2018-17584
    35Monitor

    The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.

    HighCVSS 8.8No exploitEPSS 1%

    wpfastestcache · wp fastest cacheApr 15, 2019

  • CVE-2020-36836
    32Monitor

    WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion

    HighCVSS 8.0Proof of conceptEPSS 1%

    wpfastestcache · wp fastest cacheOct 16, 2024

  • CVE-2019-6726
    27Monitor

    The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fas

    MediumCVSS 6.5No exploitEPSS 4%

    wpfastestcache · wp fastest cacheJul 29, 2019

  • CVE-2021-20714
    27Monitor

    Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to de

    MediumCVSS 6.5No exploitEPSS 3%

    wpfastestcache · wp fastest cacheApr 27, 2021

  • CVE-2018-17586
    24Monitor

    The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.

    MediumCVSS 6.1No exploitEPSS 1%

    wpfastestcache · wp fastest cacheApr 15, 2019

  • CVE-2018-17585
    24Monitor

    The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLangua

    MediumCVSS 6.1No exploitEPSS 1%

    wpfastestcache · wp fastest cacheApr 15, 2019

  • CVE-2018-17583
    24Monitor

    The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.

    MediumCVSS 6.1No exploitEPSS 1%

    wpfastestcache · wp fastest cacheApr 15, 2019

  • CVE-2021-24870
    24Monitor

    WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    wpfastestcache · wp fastest cacheJan 16, 2024

  • CVE-2023-1375
    17Monitor

    WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion

    MediumCVSS 4.3No exploitEPSS 1%

    wpfastestcache · wp fastest cacheJun 9, 2023

  • CVE-2023-1928
    17Monitor

    WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1929
    17Monitor

    WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1930
    17Monitor

    WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1931
    17Monitor

    WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1924
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1925
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1918
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1927
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1926
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023

  • CVE-2023-1919
    17Monitor

    WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'

    MediumCVSS 4.3No exploitEPSS 0%

    wpfastestcache · wp fastest cacheApr 6, 2023