CVE-2023-1927 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCssAndJsCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache...

CVE-2023-1926 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion vi...

CVE-2023-1926

The CVE-2023-1926 issue affects the WordPress plugin WP Fastest Cache (versions up to 1.1.2). Root cause: missing or incorrect nonce validation in the function deleteCacheToolbar allows unauthenticated attackers to trigger cache deletion via forged requests if a site admin is lured into clicking ...

CVE-2023-1926 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the deleteCacheToolbar function. This makes it possible for unauthenticated attackers to perform cache deletion vi...

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1925

WP Fastest Cache for WordPress up to version 1.1.2 is vulnerable to Cross-Site Request Forgery due to missing nonce validation in the wpfc_clear_cache_of_allsites_callback function. This can allow unauthenticated attackers to clear caches by tricking an administrator into performing an action (e....

CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcclearcacheofallsitescallback function. This makes it possible for unauthenticated attackers to clear cache...

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfctoolbarsavesettingscallback function. This makes it possible for unauthenticated attackers to change cache...

CVE-2023-1924

CVE-2023-1924 affects the WordPress WP Fastest Cache plugin up to version 1.1.2. The root cause is missing or incorrect nonce validation in the wpfc_toolbar_save_settings_callback function, enabling CSRF where unauthenticated attackers can forge requests to change cache settings if a site adminis...

CVE-2023-1923

Affected product: WordPress WP Fastest Cache plugin. Vulnerable component: the wpfc_remove_cdn_integration_ajax_request_callback function. Root cause: missing/incorrect nonce validation leading to Cross-Site Request Forgery. Impact: unauthenticated attackers can change CDN settings via forged req...

CVE-2023-1923 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcremovecdnintegrationajaxrequestcallback function. This makes it possible for unauthenticated attackers to...

CVE-2023-1922

The CVE-2023-1922 entry describes a CSRF flaw in WP Fastest Cache for WordPress up to version 1.1.2, caused by missing or incorrect nonce validation in the wpfc_pause_cdn_integration_ajax_request_callback function. This allows unauthenticated attackers to change CDN settings via a forged request ...

CVE-2023-1921

CVE-2023-1921 (WP Fastest Cache CSRF, WordPress) The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to 1.1.2 due to missing or incorrect nonce validation in the wpfc_start_cdn_integration_ajax_request_callback function. The vulnerability could all...

CVE-2023-1920

The CVE-2023-1920 entry refers to the WP Fastest Cache WordPress plugin with CSRF vulnerability due to missing/incorrect nonce validation in the wpfc_purgecache_varnish_callback. Affected versions are up to and including 1.1.2. The underlying issue allows unauthenticated attackers to purge the va...

CVE-2023-1920 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpurgecachevarnishcallback function. This makes it possible for unauthenticated attackers to purge the...

CVE-2023-1919

CVE-2023-1919 concerns the WordPress plugin WP Fastest Cache . A CSRF flaw stems from missing/incorrect nonce validation in the function wpfc_preload_single_save_settings_callback , allowing unauthenticated attackers to alter cache-related settings via forged requests if a site admin is tricked i...

CVE-2023-1919 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpreloadsinglesavesettingscallback function. This makes it possible for unauthenticated attackers to change...

CVE-2023-1918

The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfcpreloadsinglecallback function. This makes it possible for unauthenticated attackers to invoke a cache...

CVE-2023-1918

The CVE-2023-1918 issue affects the WordPress WP Fastest Cache plugin up to version 1.1.2, caused by missing or incorrect nonce validation in the wpfc_preload_single_callback function. Consequence per the sources: unauthenticated attackers can induce a cache-building action via forged requests, t...