Now officially on WordPress.org

CVE Database / CVE-2021-24870

CVE · Medium

CVE-2021-24870 — WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2021-24870 WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.1 < 0.9.5 0.9.5 2021-10-14 —

CVE-2021-24870

The WP Fastest Cache plugin contains a cross-site request forgery vulnerability in versions prior to 0.9.5 due to inadequate nonce validation in the wpfc_save_cdn_integration function. An attacker could exploit this flaw by crafting a malicious request that, if clicked by a site administrator, would allow the execution of stored cross-site scripting attacks. This vulnerability affects unauthenticated users who can deceive administrators into triggering the vulnerable action.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings