300 matches found
CVE-2018-17584
The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...
Design/Logic Flaw
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...
CVE-2018-17586
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...
CVE-2018-17586
CVE-2018-17586 affects the WordPress plugin WP Fastest Cache (version 0.8.8.5 and earlier). The issue is an XSS vulnerability via the rules[0][content] parameter in the wpfc_save_timeout_pages action. Connected sources also indicate additional vulnerabilities in the same plugin family and suggest...
CVE-2018-17585
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...
CVE-2018-17585
Summary: The WP Fastest Cache WordPress plugin (versions up to 0.8.8.5; advisory texts also reference 0.8.8.6) contains a cross-site scripting (XSS) vulnerability exposed via the parameters wpFastestCachePreload_number and wpFastestCacheLanguage . The issue is confirmed across multiple sources in...
CVE-2018-17584
CVE-2018-17584 affects the WordPress plugin WP Fastest Cache 0.8.8.5, with a CSRF vulnerability on the wp-admin/admin.php wpfastestcacheoptions page. The entry is supported by NVD/WPVulndb references and related OpenVAS data, and has CVSSv3 base score 8.8 (HIGH), indicating a network-scoped issue...
PT-2019-9510
Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin version 0.8.8.5 Description The issue concerns a problem with the WP Fastest Cache plugin for WordPress, where there is a potential for XSS via the wpFastestCachePreload number or wpFastestCacheLanguage parameter in the...
CVE-2018-17584: Cross-Site Request Forgery (CSRF)
The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...
CVE-2018-17586: Improper Neutralization of Input During Web Page Generation
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...
PT-2019-9509
Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin version 0.8.8.5 Description The issue concerns a CSRF problem. It affects the wp-admin/admin.php page, specifically the wpfastestcacheoptions section. Recommendations For WP Fastest Cache plugin version 0.8.8.5, conside...
PT-2019-9508
Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin version 0.8.8.5 Description The issue concerns a problem where an attacker can exploit the rules0content parameter in a wpfc save exclude pages action to perform a cross-site scripting XSS attack. Recommendations For WP...
PT-2019-9511
Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin version 0.8.8.5 Description The issue concerns a problem with the WP Fastest Cache plugin for WordPress, where there is a potential for XSS via the rules0content parameter in a wpfc save timeout pages action...
CVE-2018-17583: Improper Neutralization of Input During Web Page Generation
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsaveexcludepages action...
CVE-2018-17585: Improper Neutralization of Input During Web Page Generation
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...
WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)
An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...
WordPress WP Fastest Cache plugin <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion vulnerability
Unauthenticated Arbitrary File Deletion vulnerability found by Sebastian Neef in WordPress WP Fastest Cache plugin versions = 0.8.9.0. Solution Update the WordPress WP Fastest Cache plugin to the latest available version at least 0.8.9.1...
WordPress WP Fastest Cache 0.8.9.0 Arbitrary File Deletion
The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a directory from which files and directories will be deleted recursively. The vulnerable code path extracts the path...
WP Fastest Cache <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion
According to the original researcher: "Although a successful exploit leads to data loss and potentially a DoS against the website, because wordpress won't find important files to run, there are several requirements which need to be met: - WP Fastest Cache is installed and the cache is activated -...