Filtered by vendor Wpfastestcache
Subscriptions
Filtered by product Wp Fastest Cache
Subscriptions
Total
29 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2021-24869 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | 8.8 High |
The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber | ||||
CVE-2021-20714 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | 6.5 Medium |
Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors. | ||||
CVE-2019-6726 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header. | ||||
CVE-2019-13635 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal. | ||||
CVE-2018-17586 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action. | ||||
CVE-2018-17585 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter. | ||||
CVE-2018-17584 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page. | ||||
CVE-2018-17583 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action. | ||||
CVE-2015-9316 | 1 Wpfastestcache | 1 Wp Fastest Cache | 2024-11-21 | N/A |
The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter. |