CVE-2026-104006

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'commentauthor, commentauthoremail' parameter. This makes it possible for unauthenticated attackers to extract the full name...

EUVD-2026-96208

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'commentauthor, commentauthoremail' parameter. This makes it possible for unauthenticated attackers to extract the full name...

CVE-2026-104006 SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'commentauthor, commentauthoremail' parameter. This makes it possible for unauthenticated attackers to extract the full name...

CVE-2026-104006 SpeedyCache <= 1.4.2 - Unauthenticated Sensitive Information Exposure via Insecure Cache Configuration via Cache Write Gate Missing comment_author_* Cookie Check

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'commentauthor, commentauthoremail' parameter. This makes it possible for unauthenticated attackers to extract the full name...

CVE-2026-104006

The SpeedyCache plugin for WordPress (versions up to and including 1.4.2 ) is vulnerable to Sensitive Information Exposure (CWE-524). The issue stems from a missing check on the write path in advanced-cache.php for comment_author_* and comment_author_email_* cookies. While the read-side handler c...

CVE-2026-104006: Use of Cache Containing Sensitive Information

The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'commentauthor, commentauthoremail' parameter. This makes it possible for unauthenticated attackers to extract the full name...

WordPress SpeedyCache information leakage vulnerability

WordPress SpeedyCache 1.4.2 and earlier versions have a vulnerability related to information leakage. This vulnerability arises from improper handling of the 'commentauthor' and 'commentauthoremail' parameters. The writing path lacks checks for the 'commentauthor' cookie, allowing malicious...