WP Fastest Cache – WordPress Cache Plugin

Vulnerabilities

• CVE-2015-9316unauthenticated

  The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via t

  Critical 9.8

• CVE-2019-13635unauthenticated

  The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.

  Critical 9.1

• CVE-2015-4089unauthenticated · needs a click

  Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before

  High 8.8

• CVE-2020-36836subscriber+→ 0.9.0.3

  WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion

  High 8.0

• CVE-2026-19760unauthenticated≤ 1.5.0

  WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

  High 7.2

• CVE-2024-4347admin≤ 1.2.6

  WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) Arbitrary File Deletion

  High 7.2

• CVE-2019-6726unauthenticated

  The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fas

  Medium 6.5

• CVE-2021-20714admin

  Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to de

  Medium 6.5

• CVE-2023-1927unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'

  Medium 4.3

• CVE-2023-1926unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

  Medium 4.3

• CVE-2023-1925unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

  Medium 4.3

• CVE-2023-1924unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

  Medium 4.3

• CVE-2023-1923unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'

  Medium 4.3

• CVE-2023-1922unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'

  Medium 4.3

• CVE-2023-1921unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'

  Medium 4.3

• CVE-2023-1920unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'

  Medium 4.3

• CVE-2023-1919unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'

  Medium 4.3

• CVE-2023-1918unauthenticated · needs a click≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'

  Medium 4.3

• CVE-2025-10476subscriber+≤ 1.4.0

  WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions

  Medium 4.3

• CVE-2023-1375subscriber+≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache Deletion

  Medium 4.3

• CVE-2023-1931subscriber+≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'

  Medium 4.3

• CVE-2023-1930subscriber+≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

  Medium 4.3

• CVE-2023-1929subscriber+≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

  Medium 4.3

• CVE-2023-1928subscriber+≤ 1.1.2

  WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'

  Medium 4.3