CVE-2023-6063-PoC

CVE-2023-6063 的 PoC：WP Fastest Cache 1.2.2 未经身份验证的盲 SQL 注入 -red 这是 CVE-2023-6063 的概念验证，这是一个存在于 WP Fastest Cache ≤1.2.2 中的基于时间的盲 SQL 注入漏洞。通过滥用 wordpressloggedin cookie，从 wpusers 表中提取哈希密码（userpass）和电子邮件（useremail）。 功能特点 基于时间的数据泄露（逐字符）通过 SLEEP 延迟。 支持自定义 cookie、目标用户名和哈希验证。 此脚本提取： ☑️ WordPress...

WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete...

CVE-2023-6063

CVE-2023-6063 PoC Referencia Vulnerabilidad de inyección SQL no autenticada solucionada en WP Fastest Cache 1.2.2 | WPScan Configuración del plugin Habilitar "WP Fastest Cache". PoC El parámetro de cookie "wordpressloggedin" es vulnerable. $ python sqlmap.py --dbms=mysql -u...

CVE-2023-6063-PoC

PoC de CVE-2023-6063 Referencia Vulnerabilidad de inyección SQL no autenticada corregida en WP Fastest Cache 1.2.2 | WPScan Configuración del plugin Habilita "WP Fastest Cache". PoC El parámetro de la cookie "wordpressloggedin" es vulnerable. $ python sqlmap.py --dbms=mysql -u...

CVE-2023-6063-PoC

CVE-2023-6063-PoC 利用 WP Fastest Cache 中的 SQL注入漏洞 CVE-2023-6063...

WP Fastest Cache 1.2.2 - SQL Injection

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2023-6063 info: name: WP Fastest Cache 1.2.2 - SQL Injection author: DhiyaneshDK...

Exploit-CVE-2023-6063-PoC-Vuln

CVE-2023-6063 — PoC de inyección SQL en WP Fastest Cache -red Prueba de concepto PoC para CVE-2023-6063 , una vulnerabilidad de inyección SQL ciega basada en tiempo y no autenticada que afecta a WP Fastest Cache ≤ 1.2.2. La vulnerabilidad puede desencadenarse a través de la cookie wordpresslogged...

Exploit for SQL Injection in Wpfastestcache Wp_Fastest_Cache

CVE-2023-6063 — WP Fastest Cache SQL Injection PoC !Python...

CVE-2026-74916

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

WordPress WP Fastest Cache plugin 0.8.7.7-1.5.0 - Unauthenticated Cache Poisoning vulnerability

Unauthenticated Cache Poisoning vulnerability discovered by Amity Gilmour in WordPress Plugin WP Fastest Cache versions 0.8.7.7-1.5.0...

CVE-2026-74916

WP Fastest Cache WordPress plugin (versions 0.8.7.7 through 1.5.0 ) is vulnerable to unauthenticated cache poisoning via unkeyed tracking parameters. The plugin does not include certain tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing...

CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

EUVD-2026-68990

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

PT-2026-84123

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

CVE-2026-74916: Acceptance of Extraneous Untrusted Data With Trusted Data

The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...

WordPress WP Fastest Cache plugin <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability

Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability discovered by Adrien Brunner in WordPress Plugin WP Fastest Cache versions = 1.5.0...

CVE-2026-19760

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

CVE-2026-19760 WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

EUVD-2026-66249

The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...