The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp Fastest Cache Plugin | — | Update wp-fastest-cache plugin to version 0.9.5, or a newer patched version | May 15, 2025 | Oct 14, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub