Lucene search

K
WpfastestcacheWp Fastest Cache

7 matches found

CVE
CVE
added 2019/07/29 4:15 p.m.60 views

CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.

6.5CVSS6.5AI score0.03912EPSS
CVE
CVE
added 2019/07/30 1:15 p.m.59 views

CVE-2019-13635

The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.

9.1CVSS9.2AI score0.02805EPSS
CVE
CVE
added 2019/08/14 3:15 p.m.47 views

CVE-2015-9316

The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.

9.8CVSS9.9AI score0.01484EPSS
CVE
CVE
added 2019/04/15 8:29 p.m.40 views

CVE-2018-17584

The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page.

8.8CVSS8.7AI score0.00242EPSS
CVE
CVE
added 2019/04/15 8:29 p.m.39 views

CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameter.

6.1CVSS6.6AI score0.00264EPSS
CVE
CVE
added 2019/04/15 8:29 p.m.34 views

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_timeout_pages action.

6.1CVSS6.5AI score0.00264EPSS
CVE
CVE
added 2019/04/15 8:29 p.m.31 views

CVE-2018-17583

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.

6.1CVSS6.5AI score0.00264EPSS