CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925

WP Fastest Cache for WordPress up to version 1.1.2 is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the wpfc_clear_cache_of_allsites_callback function. This can allow unauthenticated attackers to clear caches by tricking an administrator into performing an action (e....

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1924

CVE-2023-1924 affects the WordPress WP Fastest Cache plugin up to version 1.1.2. The root cause is missing or incorrect nonce validation in the wpfc_toolbar_save_settings_callback function, enabling CSRF where unauthenticated attackers can forge requests to change cache settings if a site adminis...

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1923

Affected product: WordPress WP Fastest Cache plugin. Vulnerable component: the wpfc_remove_cdn_integration_ajax_request_callback function. Root cause: missing/incorrect nonce validation leading to Cross-Site Request Forgery. Impact: unauthenticated attackers can change CDN settings via forged req...

CVE-2023-1923 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcremovecdnintegrationajaxrequestcallback function. This makes it possible for unauthenticated attackers to...

CVE-2023-1922

The CVE-2023-1922 entry describes a CSRF flaw in WP Fastest Cache for WordPress up to version 1.1.2, caused by missing or incorrect nonce validation in the wpfc_pause_cdn_integration_ajax_request_callback function. This allows unauthenticated attackers to change CDN settings via a forged request ...

CVE-2023-1921

CVE-2023-1921 (WP Fastest Cache CSRF, WordPress) The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 1.1.2 due to missing or incorrect nonce validation in the wpfc_start_cdn_integration_ajax_request_callback function. The vulnerability could all...

CVE-2023-1920

The CVE-2023-1920 entry refers to the WP Fastest Cache WordPress plugin with CSRF vulnerability due to missing/incorrect nonce validation in the wpfc_purgecache_varnish_callback. Affected versions are up to and including 1.1.2. The underlying issue allows unauthenticated attackers to purge the va...

CVE-2023-1920 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpurgecachevarnishcallback function. This makes it possible for unauthenticated attackers to purge the...

CVE-2023-1919 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpreloadsinglesavesettingscallback function. This makes it possible for unauthenticated attackers to change...

CVE-2023-1919

CVE-2023-1919 concerns the WordPress plugin WP Fastest Cache . A CSRF flaw stems from missing/incorrect nonce validation in the function wpfc_preload_single_save_settings_callback , allowing unauthenticated attackers to alter cache-related settings via forged requests if a site admin is tricked i...

CVE-2023-1918

The CVE-2023-1918 issue affects the WordPress WP Fastest Cache plugin up to version 1.1.2, caused by missing or incorrect nonce validation in the wpfc_preload_single_callback function. Consequence per the sources: unauthenticated attackers can induce a cache-building action via forged requests, t...

CVE-2023-1918

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpreloadsinglecallback function. This makes it possible for unauthenticated attackers to invoke a cache...

WP Fatest Cache < 1.1.3 - Multiple CSRF

The plugin does not have CSRF checks in various functions, which could allow attackers to make logged in admins perform unwanted actions such as update CDN/Cache settings via CSRF attacks...

WordPress plugin WP Fastest Cache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin WP Fastest Cache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress plugin WP Fastest Cache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...