Lucene search
PRIOn knowledge basePRION:CVE-2023-1929HistoryApr 06, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-04-0621:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
fastest cache
vulnerability
data modification
unauthorized access
capability check
authenticated attackers
subscriber-level access
varnish cache
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to purge the varnish cache.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_fastest_cache | le | 1.1.2 |
Related
cvelist
cvelist
CVE-2023-1929
2023-04-06 20:05:33
nvd
nvd
CVE-2023-1929
2023-04-06 21:15:07
cve
cve
CVE-2023-1929
2023-04-06 21:15:07
nessus
nessus
WP Fastest Cache Plugin for WordPress < 1.1.3 Multiple Vulnerabilities
2023-09-13 00:00:00
openvas
openvas
WordPress Fastest Cache Plugin < 1.1.3 Multiple Vulnerabilities
2023-06-07 00:00:00
wordfence
wordfence