GCVE - cpe:2.3:a:unknown:wp_fastest_cache:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_fastest_cache:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Wp Fastest Cache (`2a18794a-eec2-5904-809f-be8a49c51c9f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6063`	vulnerable	2026-06-08 06:19:45.477976	WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users. Published: 2023-12-04T21:29:41.536Z Updated: 2024-08-02T08:21:17.206Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/30a74105-8ade-4198-abe2-1c6f2967443e https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1938`	vulnerable	2026-06-08 05:52:37.255359	WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue Published: 2023-05-30T07:49:14.686Z Updated: 2025-01-10T21:05:01.779Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/92b1c6d8-51db-46aa-bde6-abdfb091aab5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24870`	vulnerable	2026-06-08 05:30:39.536200	WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload Published: 2024-01-16T15:49:40.356Z Updated: 2026-01-09T21:03:12.947Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/48de63ab-2ef1-4469-8fc4-9346068bdf06/ https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-24869`	vulnerable	2026-06-08 05:30:39.534421	WP Fastest Cache < 0.9.5 - Subscriber+ SQL Injection The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber Published: 2024-01-16T15:49:39.970Z Updated: 2025-06-02T15:10:51.510Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/b2233795-1a32-45fc-9d51-b6bd0a073f5b/ https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.