PLUGIN SECURITY
Is Wp Fastest Cache safe?
The simplest and fastest WP Cache system
What this plugin does
- Slug:
wp-fastest-cache - Author: Emre Vona
- 1000000+ active installs
- 98/100 rating (4224 reviews on wordpress.org)
- 66933078 all-time downloads
- On WordPress.org since 2013-08-04
cachecore web vitalsOptimizepagespeedperformance
Maintenance status
- Latest known version: 1.5.0
- Last updated: 2026-08-19 8:08am GMT
- Tested up to WordPress: 7.1
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
33 known CVEs on file for Wp Fastest Cache. Reported between 2015 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-74932 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.5.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.5 | < 1.5.1 | 1.5.1 | 2026-08-25 | ⚠ update needed |
| CVE-2025-10476 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.4.1 | Missing Authorization | Medium 4.3 | < 1.4.1 | 1.4.1 | 2025-11-26 | ✓ fixed in latest |
| CVE-2026-19760 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.5.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.2 | < 1.5.1 | 1.5.1 | 2025-11-26 | ⚠ update needed |
| CVE-2024-4347 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.2.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | High 7.2 | < 1.2.7 | 1.2.7 | 2024-05-10 | ✓ fixed in latest |
| CVE-2023-6063 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.2.2 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 7.5 | < 1.2.2 | 1.2.2 | 2023-11-13 | ✓ fixed in latest |
| CVE-2023-1938 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.5 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 1.1.5 | 1.1.5 | 2023-05-02 | ✓ fixed in latest |
| CVE-2023-1930 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Missing Authorization | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1925 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
+ 45 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2023-1922 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1923 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1921 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1929 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Missing Authorization | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1924 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1927 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1931 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Missing Authorization | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1928 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Missing Authorization | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1926 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1920 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1919, CVE-2023-1920, CVE-2023-1921, CVE-2023-1923, CVE-2023-1924, CVE-2023-1925, CVE-2023-1926, CVE-2023-1927 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1918 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| CVE-2023-1375 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 1.1.3 | Missing Authorization | Medium 4.3 | < 1.1.3 | 1.1.3 | 2023-04-06 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 | — | Unknown | < 0.9.5 | 0.9.5 | 2021-10-14 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 | — | Unknown | < 0.9.5 | 0.9.5 | 2021-10-14 | ✓ fixed in latest |
| CVE-2021-24870 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 0.9.5 | 0.9.5 | 2021-10-14 | ✓ fixed in latest |
| CVE-2021-24869 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | High 8.8 | < 0.9.5 | 0.9.5 | 2021-10-14 | ✓ fixed in latest |
| CVE-2021-20714 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.1.7 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.5 | < 0.9.1.7 | 0.9.1.7 | 2021-04-27 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 | — | Unknown | < 0.9.0.3 | 0.9.0.3 | 2020-02-05 | ✓ fixed in latest |
| CVE-2020-36836 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 | Cross-Site Request Forgery (CSRF) | High 8.0 | < 0.9.0.3 | 0.9.0.3 | 2020-02-05 | ✓ fixed in latest |
| CVE-2019-13635 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.9.6 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Critical 9.1 | < 0.8.9.6 | 0.8.9.6 | 2019-07-28 | ✓ fixed in latest |
| CVE-2019-6726 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.9.1 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | Medium 6.5 | < 0.8.9.1 | 0.8.9.1 | 2019-03-12 | ✓ fixed in latest |
| CVE-2018-17583, CVE-2018-17584, CVE-2018-17585, CVE-2018-17586 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 0.8.8.6 | 0.8.8.6 | 2018-10-09 | ✓ fixed in latest |
| CVE-2018-17584 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 0.8.8.6 | 0.8.8.6 | 2018-10-09 | ✓ fixed in latest |
| CVE-2018-17586 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 0.8.8.6 | 0.8.8.6 | 2018-10-09 | ✓ fixed in latest |
| CVE-2018-17585 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 0.8.8.6 | 0.8.8.6 | 2018-10-09 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 | — | Unknown | < 0.8.7.5 | 0.8.7.5 | 2018-02-26 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 | — | Unknown | < 0.8.7.5 | 0.8.7.5 | 2018-02-22 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.5.5.9 | — | Unknown | < 0.5.5.9 | 0.5.5.9 | 2017-06-20 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.6.0 | — | Unknown | < 0.8.6.0 | 0.8.6.0 | 2016-07-13 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.6.0 | — | Unknown | < 0.8.6.0 | 0.8.6.0 | 2016-07-13 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 | — | Unknown | < 0.8.5.8 | 0.8.5.8 | 2016-05-24 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 | — | Unknown | < 0.8.5.8 | 0.8.5.8 | 2016-05-24 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 | — | Unknown | < 0.8.5.8 | 0.8.5.8 | 2016-05-23 | ✓ fixed in latest |
| CVE-2015-9316 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.4.9 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Critical 9.8 | < 0.8.4.9 | 0.8.4.9 | 2015-11-11 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.4.9 | — | Unknown | < 0.8.4.9 | 0.8.4.9 | 2015-11-11 | ✓ fixed in latest |
| CVE-2015-4089 | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.3.5 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 0.8.3.5 | 0.8.3.5 | 2015-05-26 | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.7.5 | — | Unknown | < 0.8.7.5 | 0.8.7.5 | — | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.9 | — | Unknown | < 0.8.5.9 | 0.8.5.9 | — | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.5.8 | — | Unknown | < 0.8.5.8 | 0.8.5.8 | — | ✓ fixed in latest |
| — | WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 | — | Unknown | < 0.9.0.3 | 0.9.0.3 | — | ✓ fixed in latest |
| — | WP Fastest Cache <= 0.8.5.7 - Local File Inclusion (LFI) | — | Unknown | < 0.8.5.8 | 0.8.5.8 | — | ✓ fixed in latest |
| — | WP Fastest Cache <= 0.8.5.9 - Local File Inclusion (LFI) | — | Unknown | < 0.8.5.9 | 0.8.5.9 | — | ✓ fixed in latest |
| — | WP Fastest Cache <= 0.8.7.4 - Blind SQL Injection | — | Unknown | < 0.8.7.5 | 0.8.7.5 | — | ✓ fixed in latest |
| — | WP Fastest Cache < 0.9.0.3 - Cross-Site Request Forgery (CSRF) Arbitrary File Deletion | — | Unknown | < 0.9.0.3 | 0.9.0.3 | — | ✓ fixed in latest |
How to fix it
Keep Wp Fastest Cache updated — 1.5.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- WP Super Cache — 1000000+ active installs — 86/100 (1345) — max PHP 8.4
- WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance — 1000000+ active installs — 96/100 (2606) — max PHP 8.4
- Autoptimize — 800000+ active installs — 94/100 (1428) — max PHP 8.4
- SpeedyCache – Cache, Optimization, Performance — 600000+ active installs — 88/100 (30) — max PHP 8.4
- Breeze Cache — 300000+ active installs — 72/100 (126)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.