CVE-2023-1375

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.php · Patch
• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/ae643666-70cb-4eb4-a183-e1649264ded4 · Third Party Advisory

wp fastest cache のその他の脆弱性

• CVE-2020-36836高 8.0The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 du…
• CVE-2021-24870中 6.1The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not saniti…
• CVE-2021-24869高 8.8The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL sta…
• CVE-2023-6063高 7.5The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, lea…
• CVE-2023-1938高 8.8The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using…