236 matches found
WordPress WP Fastest Cache plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Fastest Cache is one of the caching plugin. A cross-site request forgery vulnerability exists in the...
WordPress Fastest Cache Plugin < 0.8.3.5 CSRF Vulnerability
The WordPress plugin Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
CVE-2015-4089
Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...
CVE-2015-4089
The CVE-2015-4089 entries describe multiple CSRF vulnerabilities in the WordPress WP Fastest Cache plugin, specifically in the optionsPageRequest function of admin.php prior to version 0.8.3.5. An attacker can exploit the wpFastestCachePage parameter to invoke (1) saveOption, (2) deleteCache, (3)...
WordPress WP Fastest Cache plugin <= 0.8.5.8 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities
Cross-Site Request Forgery CSRF/Cross-Site Scripting XSS Vulnerabilities were found in WordPress WP Fastest Cache plugin = v0.8.5.8. The settings are not sanitized and escaped so the plugin is prone to a Cross-Site Scripting XSS vulnerability. It also missing a nonce for the settings form. Soluti...
WordPress WP Fastest Cache 0.8.5.9 Local File Inclusion
------------------------------------------------------------------------ WP Fastest Cache Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...
WordPress Fastest Cache Plugin <= 0.8.5.7 - Local File Inclusion
This plugin is prone to a local file inclusion vulnerability. It allows attackers to execute code on the target web server or on a site visitor’s browser. Then they can steal data or perform a denial of service attacks. Solution Update the plugin...
Wordpress Fastest Cache plugin XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress plugin wp-fastest-cache XSS Vulnerability Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Version:0.8.5.5 Google dork: inurl:/wp-content/plugins/wp-fastest-cache The code in...
WP Fastest Cache <= 0.8.4.8 - Blind SQL Injection
According to the researcher, for this vulnerability to be present WP-Polls plugin also needs to be installed. PoC...
WP Fastest Cache 0.8.4.8 Blind SQL Injection
Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...
WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this vulnerabilitie...
WordPress WP Fastest Cache Plugin 0.8.4.8 - Blind SQL Injection
WP Fastest Cache plugin's plugin to a blind SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin WP Fastest Cache 0.8.4.8 - Blind SQL Injection
Exploit Title: WP Fastest Cache 0.8.4.8 Blind SQL Injection Date: 11-11-2015 Software Link: https://wordpress.org/plugins/wp-fastest-cache/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description For this...
WP Fastest Cache < 0.8.3.5 - Multiple CSRF
The WP Fastest Cache WordPress plugin was affected by a Multiple CSRF security vulnerability...
WordPress WP Fastest Cache plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.WP Fastest Cache is a caching plugin. A cross-site request forgery vulnerability exists in the WordPress WP Fastest Cache plugin that allows remote attackers to...