CVE-2018-17586

Description

References

• ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.html · Exploit
• docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit · Permissions Required
• wpvulndb.com/vulnerabilities/9696

More vulnerabilities in wp fastest cache

• CVE-2020-36836HIGH 8.0The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 du…
• CVE-2021-24870MEDIUM 6.1The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not saniti…
• CVE-2021-24869HIGH 8.8The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL sta…
• CVE-2023-6063HIGH 7.5The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, lea…
• CVE-2023-1375MEDIUM 4.3The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a miss…