Cross site request forgery (csrf)

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcremovecdnintegrationajaxrequestcallback function. This makes it possible for unauthenticated attackers to...

Cross site request forgery (csrf)

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpurgecachevarnishcallback function. This makes it possible for unauthenticated attackers to purge the...

CVE-2023-1928

The CVE-2023-1928 entry concerns the WordPress WP Fastest Cache plugin (versions up to 1.1.2). The vulnerability is a missing capability check in the wpfc_preload_single_callback function, enabling authenticated users with subscriber-level access to initiate cache creation (unauthorized data modi...

CVE-2023-1929

The CVE-2023-1929 entry concerns the WordPress WP Fastest Cache plugin, affected through versions up to 1.1.2. The root cause is a missing capability check in the wpfc_purgecache_varnish_callback function, enabling authenticated subscribers to purge the varnish cache. This leads to unauthorized d...

CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

CVE-2023-1930 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

CVE-2023-1930

The CVE-2023-1930 entry concerns the WP Fastest Cache WordPress plugin. The vulnerability arises from a missing capability check in the wpfc_clear_cache_of_allsites_callback function, affecting versions up to and including 1.1.2. This weakens access control: authenticated attackers with subscribe...

CVE-2023-1931

The CVE-2023-1931 entry concerns the WordPress WP Fastest Cache plugin. Affected software: WP Fastest Cache plugin for WordPress (versions up to and including 1.1.2). Root cause: a missing capability check in the deleteCssAndJsCacheToolbar function, enabling authenticated users with subscriber-le...

CVE-2023-1931 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...

CVE-2023-1927 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache...

CVE-2023-1927

Affected software: WP Fastest Cache plugin for WordPress (versions up to and including 1.1.2). Vulnerability type & root cause: Cross-Site Request Forgery (CSRF) due to missing/incorrect nonce validation in the deleteCssAndJsCacheToolbar function. Impact: Unauthenticated attackers can delete cach...

CVE-2023-1926 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion vi...

CVE-2023-1926

The CVE-2023-1926 issue affects the WordPress plugin WP Fastest Cache (versions up to 1.1.2). Root cause: missing or incorrect nonce validation in the function deleteCacheToolbar allows unauthenticated attackers to trigger cache deletion via forged requests if a site admin is lured into clicking ...

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925

WP Fastest Cache for WordPress up to version 1.1.2 is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the wpfc_clear_cache_of_allsites_callback function. This can allow unauthenticated attackers to clear caches by tricking an administrator into performing an action (e....

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1924

CVE-2023-1924 affects the WordPress WP Fastest Cache plugin up to version 1.1.2. The root cause is missing or incorrect nonce validation in the wpfc_toolbar_save_settings_callback function, enabling CSRF where unauthenticated attackers can forge requests to change cache settings if a site adminis...

CVE-2023-1923

Affected product: WordPress WP Fastest Cache plugin. Vulnerable component: the wpfc_remove_cdn_integration_ajax_request_callback function. Root cause: missing/incorrect nonce validation leading to Cross-Site Request Forgery. Impact: unauthenticated attackers can change CDN settings via forged req...