CVE-2026-5114

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation which allows query strings like .css?... and path resolution which strips query strings, combined with no...

CVE-2026-5114

The CVE-2026-5114 entry concerns the SpeedyCache WordPress plugin, affecting all versions up to 1.3.8. The root cause is a mismatch between CSS URL validation (accepts query strings like .css?...) and path resolution (strips query strings), plus no validation that the resolved file is a CSS file....

CVE-2026-5114 SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation which allows query strings like .css?... and path resolution which strips query strings, combined with no...

EUVD-2026-49989

The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation which allows query strings like .css?... and path resolution which strips query strings, combined with no...

CVE-2023-49746

Server-Side Request Forgery SSRF vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2...

EUVD-2023-53669

Malicious code in bioql PyPI...

EUVD-2023-58822

Malicious code in bioql PyPI...

EUVD-2024-40191

Malicious code in bioql PyPI...

CVE-2024-43299

Cross-Site Request Forgery CSRF vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through = 1.1.8...

CVE-2023-6598

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycachesavevarniship, speedycacheimgupdatesettings, speedycachepreloadingaddsettings, and speedycachepreloadingdeleteresource functions in all versions up to, and...

CVE-2024-43299

Cross-Site Request Forgery CSRF vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through = 1.1.8...

CVE-2024-43299

Cross-Site Request Forgery CSRF vulnerability in Softaculous Team SpeedyCache.This issue affects SpeedyCache: from n/a through 1.1.8...

CVE-2024-43299

CVE-2024-43299 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Softaculous SpeedyCache (WordPress SpeedyCache plugin). Public sources indicate the issue impacts SpeedyCache versions up to 1.1.8. Remediation: upgrade to 1.1.9 to resolve the CSRF issue, per PT-2024-30465 guidance. Th...

CVE-2024-43299 WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through = 1.1.8...

CVE-2024-43299 WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: from n/a through = 1.1.8...

WordPress plugin SpeedyCache 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

PT-2024-30465 · Unknown · Speedycache

Name of the Vulnerable Software and Affected Versions: SpeedyCache versions 1.1.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the SpeedyCache plugin. This allows an attacker to perform unintended actions on a user's account. Users are urged to upgrade to mitigate risk...

WordPress SpeedyCache plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin SpeedyCache versions = 1.1.8...

WordPress SpeedyCache Plugin <= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF)

Software SpeedyCache Type Plugin Vulnerable versions = 1.1.8 Fixed in 1.1.9 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43299 Patch priority Low CVSS severity Low 5.4 Developer SpeedyCache PSID ed0a8c96439c Credits Rafie Muhammad Patchstack...

CVE-2023-6598

The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycachesavevarniship, speedycacheimgupdatesettings, speedycachepreloadingaddsettings, and speedycachepreloadingdeleteresource functions in all versions up to, and...