CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

CVE-2023-1929

The CVE-2023-1929 entry concerns the WordPress WP Fastest Cache plugin, affected through versions up to 1.1.2. The root cause is a missing capability check in the wpfc_purgecache_varnish_callback function, enabling authenticated subscribers to purge the varnish cache. This leads to unauthorized d...

CVE-2023-1930

The CVE-2023-1930 entry concerns the WP Fastest Cache WordPress plugin. The vulnerability arises from a missing capability check in the wpfc_clear_cache_of_allsites_callback function, affecting versions up to and including 1.1.2. This weakens access control: authenticated attackers with subscribe...

CVE-2023-1930 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

CVE-2023-1931

The CVE-2023-1931 entry concerns the WordPress WP Fastest Cache plugin. Affected software: WP Fastest Cache plugin for WordPress (versions up to and including 1.1.2). Root cause: a missing capability check in the deleteCssAndJsCacheToolbar function, enabling authenticated users with subscriber-le...

CVE-2023-1931 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...

CVE-2023-1927

Affected software: WP Fastest Cache plugin for WordPress (versions up to and including 1.1.2). Vulnerability type & root cause: Cross-Site Request Forgery (CSRF) due to missing/incorrect nonce validation in the deleteCssAndJsCacheToolbar function. Impact: Unauthenticated attackers can delete cach...

CVE-2023-1927 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache...

CVE-2023-1926

The CVE-2023-1926 issue affects the WordPress plugin WP Fastest Cache (versions up to 1.1.2). Root cause: missing or incorrect nonce validation in the function deleteCacheToolbar allows unauthenticated attackers to trigger cache deletion via forged requests if a site admin is lured into clicking ...

CVE-2023-1926 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion vi...

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925

WP Fastest Cache for WordPress up to version 1.1.2 is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the wpfc_clear_cache_of_allsites_callback function. This can allow unauthenticated attackers to clear caches by tricking an administrator into performing an action (e....

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1924

CVE-2023-1924 affects the WordPress WP Fastest Cache plugin up to version 1.1.2. The root cause is missing or incorrect nonce validation in the wpfc_toolbar_save_settings_callback function, enabling CSRF where unauthenticated attackers can forge requests to change cache settings if a site adminis...

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1923 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcremovecdnintegrationajaxrequestcallback function. This makes it possible for unauthenticated attackers to...

CVE-2023-1923

Affected product: WordPress WP Fastest Cache plugin. Vulnerable component: the wpfc_remove_cdn_integration_ajax_request_callback function. Root cause: missing/incorrect nonce validation leading to Cross-Site Request Forgery. Impact: unauthenticated attackers can change CDN settings via forged req...

CVE-2023-1922

The CVE-2023-1922 entry describes a CSRF flaw in WP Fastest Cache for WordPress up to version 1.1.2, caused by missing or incorrect nonce validation in the wpfc_pause_cdn_integration_ajax_request_callback function. This allows unauthenticated attackers to change CDN settings via a forged request ...

CVE-2023-1921

CVE-2023-1921 (WP Fastest Cache CSRF, WordPress) The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 1.1.2 due to missing or incorrect nonce validation in the wpfc_start_cdn_integration_ajax_request_callback function. The vulnerability could all...

CVE-2023-1920

The CVE-2023-1920 entry refers to the WP Fastest Cache WordPress plugin with CSRF vulnerability due to missing/incorrect nonce validation in the wpfc_purgecache_varnish_callback. Affected versions are up to and including 1.1.2. The underlying issue allows unauthenticated attackers to purge the va...