CVE-2026-104021

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to and including 1.7.4 . The flaw exists in the fastcache_settings[cache_cookie_exclude][] parameter because the plugin registers the setting via register_setting() without a sanitize_callback. The bu...

EUVD-2026-96068

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...

WordPress Fastcache by Host.it plugin <= 1.7.4 - Authenticated (Administrator+) Code Injection vulnerability

Authenticated Administrator+ Code Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Fastcache by Host.it versions = 1.7.4...