CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...

CVE-2018-17585

Summary: The WP Fastest Cache WordPress plugin (versions up to 0.8.8.5; advisory texts also reference 0.8.8.6) contains a cross-site scripting (XSS) vulnerability exposed via the parameters wpFastestCachePreload_number and wpFastestCacheLanguage . The issue is confirmed across multiple sources in...

CVE-2018-17584

CVE-2018-17584 affects the WordPress plugin WP Fastest Cache 0.8.8.5, with a CSRF vulnerability on the wp-admin/admin.php wpfastestcacheoptions page. The entry is supported by NVD/WPVulndb references and related OpenVAS data, and has CVSSv3 base score 8.8 (HIGH), indicating a network-scoped issue...

WordPress Fastest Cache Plugin Arbitrary File Deletion (CVE-2019-6726)

An arbitrary file deletion vulnerability exists in WordPress Fastest Cache Plugin. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request to the target system...

WordPress WP Fastest Cache plugin <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion vulnerability

Unauthenticated Arbitrary File Deletion vulnerability found by Sebastian Neef in WordPress WP Fastest Cache plugin versions = 0.8.9.0. Solution Update the WordPress WP Fastest Cache plugin to the latest available version at least 0.8.9.1...

WordPress WP Fastest Cache 0.8.9.0 Arbitrary File Deletion

The wordpress plugin "WP Fastest Cache" 0 suffered from an arbitrary file deletion bug. Description A successful attack allows an unauthenticated attacker to specify a path to a directory from which files and directories will be deleted recursively. The vulnerable code path extracts the path...

WP Fastest Cache <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion

According to the original researcher: "Although a successful exploit leads to data loss and potentially a DoS against the website, because wordpress won't find important files to run, there are several requirements which need to be met: - WP Fastest Cache is installed and the cache is activated -...

WP Fastest Cache <= 0.8.8.5 - CSRF and multiple XSS

The WP Fastest Cache WordPress plugin was affected by a CSRF and multiple XSS security vulnerability...

U.S. Builds World's Fastest Supercomputer – Summit

China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...

WordPress WP Fastest Cache plugin <=0.8.7.4 - Blind SQL Injection (SQLi) vulnerability

Blind SQL Injection SQLi vulnerability found in WordPress WP Fastest Cache plugin versions =0.8.7.4. Solution Update the WordPress WP Fastest Cache plugin to the latest available version at least 0.8.7.5...

WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection

Improper escaping of user input when deleting the cache of specific pages leads to SQL injection vulnerability. escsql was used on input but the result was used unquoted in the constructed SQL query. Send GET request to "URL/wp-admin/admin-ajax.php?action=wpfcclearcachecolumn&id=1 PAYLOAD"...

WordPress WP Fastest Cache plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Fastest Cache is one of the caching plugin. A cross-site request forgery vulnerability exists in the...

WordPress Fastest Cache Plugin < 0.8.3.5 CSRF Vulnerability

The WordPress plugin Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2015-4089

Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the 1 saveOption, 2 deleteCache, 3...

CVE-2015-4089

The CVE-2015-4089 entries describe multiple CSRF vulnerabilities in the WordPress WP Fastest Cache plugin, specifically in the optionsPageRequest function of admin.php prior to version 0.8.3.5. An attacker can exploit the wpFastestCachePage parameter to invoke (1) saveOption, (2) deleteCache, (3)...

WordPress WP Fastest Cache plugin <= 0.8.5.8 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerabilities

Cross-Site Request Forgery CSRF/Cross-Site Scripting XSS Vulnerabilities were found in WordPress WP Fastest Cache plugin = v0.8.5.8. The settings are not sanitized and escaped so the plugin is prone to a Cross-Site Scripting XSS vulnerability. It also missing a nonce for the settings form. Soluti...

Fastest Mini Browser - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fastest Mini Browser published at the 'play' market has multiple vulnerabilities...

WordPress WP Fastest Cache 0.8.5.9 Local File Inclusion

------------------------------------------------------------------------ WP Fastest Cache Member Local File Inclusion vulnerability ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Fastest Cache Plugin <= 0.8.5.7 - Local File Inclusion

This plugin is prone to a local file inclusion vulnerability. It allows attackers to execute code on the target web server or on a site visitor’s browser. Then they can steal data or perform a denial of service attacks. Solution Update the plugin...