145 matches found
CVE-2023-6063
CVE-2023-6063 PoC 参考 WP Fastest Cache 1.2.2 で対処された認証なしSQLインジェクションの脆弱性 | WPScan プラグイン設定 「WP Fastest Cache」を有効にします。 PoC 「wordpressloggedin」Cookie パラメータは脆弱です。 root@kitploit: $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php" --cookie='wordpressloggedin=' --level=2 --schema...
CVE-2023-6063-PoC
CVE-2023-6063-PoC WP Fastest Cache CVE-2023-6063 における SQLインジェクション脆弱性の悪用...
CVE-2023-6063-PoC
CVE-2023-6063 の PoC: WP Fastest Cache 1.2.2 未認証ブラインドSQLインジェクション -red CVE-2023-6063 の概念実証（PoC）です。WP Fastest Cache ≤1.2.2 における時間ベースのブラインドSQLインジェクションの脆弱性を利用し、wordpressloggedin クッキーを悪用して wpusers テーブルからハッシュ化されたパスワード userpass とメールアドレス useremail を抽出します。 特徴 SLEEP ディレイを用いた時間ベースのデータ抽出（1文字ずつ）...
CVE-2023-6063-PoC
CVE-2023-6063 PoC 参照 WP Fastest Cache 1.2.2 で対処された未認証SQLインジェクションの脆弱性 | WPScan プラグイン設定 「WP Fastest Cache」を有効にします。 PoC 「wordpressloggedin」クッキーパラメータに脆弱性があります。 root@kitploit: $ python sqlmap.py --dbms=mysql -u "http://127.0.0.1/wp-login.php" --cookie='wordpressloggedin=' --level=2 --schema...
CVE-2026-74916
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...
CVE-2026-74916
WP Fastest Cache WordPress plugin (versions 0.8.7.7 through 1.5.0 ) is vulnerable to unauthenticated cache poisoning via unkeyed tracking parameters. The plugin does not include certain tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing...
CVE-2026-74916 WP Fastest Cache 0.8.7.7 - 1.5.0 - Unauthenticated Cache Poisoning via Unkeyed Tracking Parameters
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...
EUVD-2026-68990
The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its page-cache key while still caching pages requested with them, allowing unauthenticated attackers to have a page rendered under their own request context stored under, and served...
WP Fastest Cache 1.2.2 - SQL Injection
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. id: CVE-2023-6063 info: name: WP Fastest Cache 1.2.2 - SQL Injection author: DhiyaneshDK...
WordPress WP Fastest Cache plugin <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability
Unauthenticated Stored Cross-Site Scripting via HTTP Host Header vulnerability discovered by Adrien Brunner in WordPress Plugin WP Fastest Cache versions = 1.5.0...
CVE-2026-19760
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
EUVD-2026-66249
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
CVE-2026-19760
The WP Fastest Cache WordPress plugin (all versions up to and including 1.5.0) is vulnerable to unauthenticated stored cross-site scripting via the HTTP Host header. Insufficient input sanitization and output escaping in the Host-header-to-URL code path allows an attacker to inject arbitrary scri...
CVE-2026-19760 WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header
The WP Fastest Cache – WordPress Cache Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Host Header in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...
CVE-2026-74932
The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references ...
CVE-2026-74932 WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning
The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references ...
CVE-2026-74932
WP Fastest Cache (WordPress plugin) versions before 1.5.1 fail to validate the Host header before using it to build URLs for asset files embedded in cached pages, and omit that header from the cache key. This allows an unauthenticated attacker to poison cached pages with references to an attacker...
CVE-2025-10476 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfcdbfixcallback function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above,...