module

WordPress WP Fastest Cache Unauthenticated SQLi (CVE-2023-6063)

Disclosed
Nov 14, 2023

Description

WP Fastest Cache, a WordPress plugin,
prior to version 1.2.2, is vulnerable to an unauthenticated SQL injection
vulnerability via the 'wordpress_logged_in' cookie. This can be exploited via a blind SQL injection attack without requiring any authentication.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.