Lucene search
Marc MontpasWPVDB-ID:B2233795-1A32-45FC-9D51-B6BD0A073F5BHistoryOct 14, 2021 - 12:00 a.m.
WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection
2021-10-1400:00:00
Marc Montpas
wpscan.com
12
0.001 Low
EPSS
Percentile
19.4%
The plugin does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-fastest-cache | lt | 0.9.5 |
Related
prion
prion
Sql injection
2024-01-16 16:15:00
cvelist
cvelist
CVE-2021-24869 WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection
2024-01-16 15:49:39
nvd
nvd
CVE-2021-24869
2024-01-16 16:15:09
malwarebytes
malwarebytes
Multiple vulnerabilities in popular WordPress plugin WP Fastest Cache
2021-10-18 13:37:17
cve
cve
CVE-2021-24869
2024-01-16 16:15:09
openvas
openvas
WordPress WP Fastest Cache Plugin < 0.9.5 Multiple Vulnerabilities
2021-11-03 00:00:00