2 matches found
CVE-2026-104021
The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...
7.2CVSS0.004EPSS
SaveExploits0References7
CVE-2026-104021: Improper Control of Generation of Code
The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...
7.2CVSS6.4AI score0.004EPSS
SaveExploits0References2
20