Lucene search
+L

224 matches found

Nuclei
Nuclei
added yesterday182 views

WP Fastest Cache 1.2.2 - SQL Injection

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2023-6063 info: name: WP Fastest Cache 1.2.2 - SQL Injection author: DhiyaneshDK...

7.5CVSS7.1AI score0.73708EPSS
SaveExploits11References5
Nuclei
Nuclei
added yesterday49 views

WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

8.1CVSS5.9AI score0.01407EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/12 7:20 a.m.41 views

CVE-2025-10583 WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery

The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web reques...

3.5CVSS0.00209EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/12 7:20 a.m.9 views

EUVD-2025-203050

The WP Fastest Cache plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'getservertimeajaxrequest' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...

3.5CVSS5.4AI score0.00209EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/12 7:20 a.m.20 views

CVE-2025-10583

CVE-2025-10583 — WordPress WP Fastest Cache Premium : A SSRF vulnerability via the get_server_time_ajax_request action affects WP Fastest Cache Premium versions

3.5CVSS6AI score0.00209EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/12/12 12:16 a.m.9 views

WordPress WP Fastest Cache Premium plugin <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery vulnerability

Missing Authorization to Authenticated Subscriber+ Blind Server-Side Request Forgery vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Fastest Cache Premium versions = 1.7.4...

3.5CVSS7AI score0.00209EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.6 views

WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

3.5CVSS6.6AI score0.00209EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/27 10:57 a.m.17 views

CVE-2025-10476 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

4.3CVSS0.00214EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/27 10:57 a.m.4 views

CVE-2025-10476 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...

4.3CVSS4.7AI score0.00214EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/11/27 12:45 a.m.12 views

WordPress WP Fastest Cache plugin <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions vulnerability

Missing Authorization to Authenticated Subscriber+ DB Cleanup Actions vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Fastest Cache versions = 1.4.0...

4.3CVSS7AI score0.00214EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/27 12:0 a.m.9 views

WordPress plugin WP Fastest Cache 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

4.3CVSS6.3AI score0.00214EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-5063

Malware in sbrugna...

9.1CVSS9.1AI score0.44363EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-9334

Malware in sbrugna...

6.1CVSS6.7AI score0.01365EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2015-9156

Malware in sbrugna...

9.8CVSS9.4AI score0.02987EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2019-16284

Malware in sbrugna...

6.5CVSS6.4AI score0.04348EPSS
SaveExploits3References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.16 views

EUVD-2015-4114

Malware in sbrugna...

8.8CVSS8.8AI score0.00992EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-9331

Malware in sbrugna...

6.1CVSS6.7AI score0.01365EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-9332

Malware in sbrugna...

8.8CVSS8.8AI score0.00919EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-9333

Malware in sbrugna...

6.1CVSS6.7AI score0.01365EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2023-24115

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00227EPSS
SaveExploits0References2
Rows per page
Query Builder