Lucene search
+L

10025 matches found

NVD
NVD
added 2023/04/06 9:15 p.m.27 views

CVE-2023-1928

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpreloadsinglecallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiat...

4.3CVSS4.2AI score0.00386EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/06 9:15 p.m.7 views

CVE-2023-1930

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/04/06 9:15 p.m.6 views

CVE-2023-1930

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/04/06 9:15 p.m.4 views

CVE-2023-1931

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/04/06 9:15 p.m.3 views

CVE-2023-1928

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpreloadsinglecallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiat...

4.3CVSS6.6AI score0.00386EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/04/06 9:15 p.m.4 views

CVE-2023-1929

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References4
Prion
Prion
added 2023/04/06 9:15 p.m.31 views

Design/Logic Flaw

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

4CVSS4.3AI score0.00389EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/04/06 9:15 p.m.17 views

Design/Logic Flaw

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

4CVSS4.3AI score0.00389EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/04/06 9:15 p.m.22 views

Arbitrary file deletion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...

4CVSS4.3AI score0.00389EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/04/06 8:5 p.m.34 views

CVE-2023-1928 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpreloadsinglecallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to initiat...

4.3CVSS4.5AI score0.00386EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/06 8:5 p.m.43 views

CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to pur...

4.3CVSS4.5AI score0.00389EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/04/06 8:5 p.m.8 views

CVE-2023-1930 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/06 8:5 p.m.18 views

CVE-2023-1930 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfcclearcacheofallsitescallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to dele...

4.3CVSS4.5AI score0.00389EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/04/06 8:5 p.m.38 views

CVE-2023-1931 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...

4.3CVSS4.5AI score0.00389EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/04/06 1:57 a.m.4 views

SUSE CVE-2022-36440

A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peekforas4capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS...

7.5CVSS6.9AI score0.01624EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.9 views

PT-2023-17349 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2 Description: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc purgecache varnish...

4.3CVSS5.1AI score0.00389EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.9 views

PT-2023-17351 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2 Description: The issue is related to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function. This allows authenticated...

4.3CVSS5.2AI score0.00389EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
added 2023/04/06 12:0 a.m.3 views

VulnCheck KEV: CVE-2022-4940

The WCFM Membership plugin for WordPress is vulnerable to unauthorized modification and access of data in versions up to, and including, 2.10.0 due to missing capability checks on various AJAX actions. This makes it possible for unauthenticated attackers to perform a wide variety of actions...

7.3CVSS6.9AI score0.01084EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.8 views

PT-2023-17348 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2 Description: The issue allows unauthorized data modification due to a missing capability check on the wpfc preload single callback function. This makes it possible for...

4.3CVSS5.2AI score0.00386EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
added 2023/04/06 12:0 a.m.2 views

VulnCheck KEV: CVE-2023-1929

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfcpurgecachevarnishcallback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access...

4.3CVSS6.6AI score0.00389EPSS
SaveExploits0References1
Rows per page
Query Builder