Approved changes feed: RSS · Atom

cpe:2.3:a:emrevona:wp_fastest_cache_–_wordpress_cache_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEmrevona (a1193870-f42d-564c-a9dc-27d9abe1618a)
ProductWp Fastest Cache – Wordpress Cache Plugin (00abdd30-d0fb-5ac2-b9e7-3e61cba3b9b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-10476 vulnerable 2026-06-08 07:02:26.935163 WP Fastest Cache <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) DB Cleanup Actions
MEDIUM (4.3)
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpfc_db_fix_callback() function in all versions up to, and including, 1.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to initiate several database fix actions. This only affects sites with premium activated.
Published: 2025-11-27T10:57:36.094Z
Updated: 2026-04-08T17:20:08.134Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4347 vulnerable 2026-06-08 06:50:17.558234 WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) Arbitrary File Deletion
HIGH (7.2)
The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the affected site or other sites in a shared hosting environment.
Published: 2024-05-23T05:32:15.439Z
Updated: 2026-04-08T16:57:17.405Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1931 vulnerable 2026-06-08 05:52:37.227146 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'
MEDIUM (4.3)
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache deletion.
Published: 2023-04-06T20:05:26.861Z
Updated: 2026-04-08T17:17:02.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1930 vulnerable 2026-06-08 05:52:37.226480 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
MEDIUM (4.3)
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to delete caches.
Published: 2023-04-06T20:05:30.159Z
Updated: 2026-04-08T17:18:21.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1929 vulnerable 2026-06-08 05:52:37.226067 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'
MEDIUM (4.3)
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to purge the varnish cache.
Published: 2023-04-06T20:05:33.686Z
Updated: 2026-04-08T16:40:47.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1928 vulnerable 2026-06-08 05:52:37.225638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1927 vulnerable 2026-06-08 05:52:37.225216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1926 vulnerable 2026-06-08 05:52:37.224896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1925 vulnerable 2026-06-08 05:52:37.224557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1924 vulnerable 2026-06-08 05:52:37.224125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1923 vulnerable 2026-06-08 05:52:37.223698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1922 vulnerable 2026-06-08 05:52:37.223260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1921 vulnerable 2026-06-08 05:52:37.222903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1920 vulnerable 2026-06-08 05:52:37.222450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1919 vulnerable 2026-06-08 05:52:37.221854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1918 vulnerable 2026-06-08 05:52:37.220163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1375 vulnerable 2026-06-08 05:52:35.719285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36836 vulnerable 2026-06-08 05:25:49.633968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.