CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

Design/Logic Flaw

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsaveexcludepages action...

CVE-2018-17584

The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...

Design/Logic Flaw

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...

CVE-2018-17586

CVE-2018-17586 affects the WordPress plugin WP Fastest Cache (version 0.8.8.5 and earlier). The issue is an XSS vulnerability via the rules[0][content] parameter in the wpfc_save_timeout_pages action. Connected sources also indicate additional vulnerabilities in the same plugin family and suggest...

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-17585

Summary: The WP Fastest Cache WordPress plugin (versions up to 0.8.8.5; advisory texts also reference 0.8.8.6) contains a cross-site scripting (XSS) vulnerability exposed via the parameters wpFastestCachePreload_number and wpFastestCacheLanguage . The issue is confirmed across multiple sources in...

CVE-2018-17584

CVE-2018-17584 affects the WordPress plugin WP Fastest Cache 0.8.8.5, with a CSRF vulnerability on the wp-admin/admin.php wpfastestcacheoptions page. The entry is supported by NVD/WPVulndb references and related OpenVAS data, and has CVSSv3 base score 8.8 (HIGH), indicating a network-scoped issue...

WP Fastest Cache <= 0.8.8.5 - CSRF and multiple XSS

The WP Fastest Cache WordPress plugin was affected by a CSRF and multiple XSS security vulnerability...

WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection

Improper escaping of user input when deleting the cache of specific pages leads to SQL injection vulnerability. escsql was used on input but the result was used unquoted in the constructed SQL query. Send GET request to "URL/wp-admin/admin-ajax.php?action=wpfcclearcachecolumn&id=1 PAYLOAD"...

WordPress Fastest Cache Plugin < 0.8.3.5 CSRF Vulnerability

The WordPress plugin Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2015-4089

Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...

CVE-2015-4089

The CVE-2015-4089 entries describe multiple CSRF vulnerabilities in the WordPress WP Fastest Cache plugin, specifically in the optionsPageRequest function of admin.php prior to version 0.8.3.5. An attacker can exploit the wpFastestCachePage parameter to invoke (1) saveOption, (2) deleteCache, (3)...

WordPress WP Fastest Cache 0.8.5.9 Local File Inclusion

------------------------------------------------------------------------ WP Fastest Cache Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...

Wordpress Fastest Cache plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin wp-fastest-cache XSS Vulnerability Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Version:0.8.5.5 Google dork: inurl:/wp-content/plugins/wp-fastest-cache The code in...

WP Fastest Cache <= 0.8.4.8 - Blind SQL Injection

According to the researcher, for this vulnerability to be present WP-Polls plugin also needs to be installed. PoC...

WP Fastest Cache 0.8.4.8 Blind SQL Injection

Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...

WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection

Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...