Lucene search
K

223 matches found

Nuclei
Nuclei
added yesterday13 views

WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

8.1CVSS5.9AI score0.43147EPSS
Exploits1References4
Nuclei
Nuclei
added 6 days ago137 views

WP Fastest Cache 1.2.2 - SQL Injection

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2023-6063 info: name: WP Fastest Cache 1.2.2 - SQL Injection author: DhiyaneshDK...

7.5CVSS7.2AI score0.91366EPSS
Exploits11References5
Cvelist
Cvelist
added 2025/12/12 7:20 a.m.24 views

CVE-2025-10583 WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web reques...

3.5CVSS0.0003EPSS
Exploits0References4
CVE
CVE
added 2025/12/12 7:20 a.m.8 views

CVE-2025-10583

CVE-2025-10583 — WordPress WP Fastest Cache Premium : A SSRF vulnerability via the get_server_time_ajax_request action affects WP Fastest Cache Premium versions

3.5CVSS6AI score0.0003EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/12 7:20 a.m.2 views

EUVD-2025-203050

The WP Fastest Cache plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...

3.5CVSS5.4AI score0.0003EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/12 12:16 a.m.4 views

WordPress WP Fastest Cache Premium plugin <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery vulnerability

Missing Authorization to Authenticated Subscriber+ Blind Server-Side Request Forgery vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Fastest Cache Premium versions = 1.7.4...

3.5CVSS7AI score0.0003EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.1 views

WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

3.5CVSS6.6AI score0.0003EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/27 10:57 a.m.3 views

CVE-2025-10476 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

4.3CVSS4.7AI score0.00034EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/11/27 10:57 a.m.8 views

CVE-2025-10476 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

4.3CVSS0.00034EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/27 12:45 a.m.6 views

WordPress WP Fastest Cache plugin <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions vulnerability

Missing Authorization to Authenticated Subscriber+ DB Cleanup Actions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Fastest Cache versions = 1.4.0...

4.3CVSS7AI score0.00034EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/27 12:0 a.m.2 views

WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

4.3CVSS6.3AI score0.00034EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2019-16284

Malware in sbrugna...

6.5CVSS6.4AI score0.0384EPSS
Exploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-9156

Malware in sbrugna...

9.8CVSS9.4AI score0.01484EPSS
Exploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-5063

Malware in sbrugna...

9.1CVSS9.1AI score0.03202EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2015-4114

Malware in sbrugna...

8.8CVSS8.8AI score0.0018EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-9333

Malware in sbrugna...

6.1CVSS6.7AI score0.00249EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-9331

Malware in sbrugna...

6.1CVSS6.7AI score0.00249EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-9332

Malware in sbrugna...

8.8CVSS8.8AI score0.00173EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-9334

Malware in sbrugna...

6.1CVSS6.7AI score0.00249EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-24116

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00225EPSS
Exploits0References2
Rows per page
Query Builder