WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

CVE-2025-10476: Missing Authorization

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

EUVD-2015-4114

Malware in sbrugna...

EUVD-2018-9332

Malware in sbrugna...

EUVD-2015-9156

Malware in sbrugna...

EUVD-2019-5063

Malware in sbrugna...

EUVD-2018-9331

Malware in sbrugna...

EUVD-2018-9333

Malware in sbrugna...

EUVD-2019-16284

Malware in sbrugna...

EUVD-2018-9334

Malware in sbrugna...

EUVD-2023-24118

Malicious code in bioql PyPI...

EUVD-2023-24116

Malicious code in bioql PyPI...

EUVD-2023-24109

Malicious code in bioql PyPI...

EUVD-2021-8129

Malicious code in bioql PyPI...

EUVD-2023-24108

Malicious code in bioql PyPI...

EUVD-2023-24106

Malicious code in bioql PyPI...

EUVD-2023-24115

Malicious code in bioql PyPI...

CVE-2023-1929

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

CVE-2023-1928

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpreloadsinglecallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiat...

CVE-2023-1923

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcremovecdnintegrationajaxrequestcallback function. This makes it possible for unauthenticated attackers to...