WordPress: Popular plugin “WP Fastest Cache” urgently needs an update

The WP Fastest Cache plug-in for optimizing the loading times of WordPress websites offered attack options for cross-site scripting (XSS) and SQL injection. An update is available for the more than one million users of the cache plugin: WP Fastest Cache 0.9.5 eliminates the in all previous versions existing security problems. If you haven’t updated the plugin yet, you should do so as soon as possible. Those who discovered the vulnerabilities rate the security risk as “high” to “critical”. The secured version has been on the WP Fastest Cache download site available. A Blog entry by the company Jetpack gives details of the two vulnerabilities, which strangely have the same CVE ID (CVE-2021-24869), but different descriptions and CVSS scores (7.7 / “High” and 9.6 / “Critical”). The score 7.7 relates to a possibility of SQL injection, which only exists under certain conditions: The attacker must be logged in as a “normal” user and this must also be done in the attacked WP installation “Classic Editor” plugin installed. If these prerequisites are met, it is conceivable that sensitive data such as user names in combination with password hashes can be accessed. The attack possibility rated 9.6 also exists without such restrictions, but requires user interaction with the website: In the course of a so-called Cross-Site-Request-Forgery attack, it is possible to carry out any actions with the rights of the administrator during the attack was registered. In addition, the attacker could permanently smuggle malicious code into the website in question, which could later be used for “Stored XSS” attacks, for example.
To home page



Leave a Reply

Related Posts

Marijuana Problem Chart

Marijuana Problem Chart Marijuana can affect people in different ways, both good and bad. It can make you feel relaxed, happy, and relieve pain because

Marijuana Dispensary Uxbridge Ma

Marijuana Dispensary Uxbridge Ma Looking for the best marijuana dispensary in Uxbridge, MA? Look no further than XYZ Dispensary! XYZ Dispensary is known for its

Marijuana Coffeeshop Zwolle

Marijuana Coffeeshop Zwolle Key Takeaways Uncover the wide variety of coffee spots in Zwolle, each with its own unique atmosphere and menu tailored to different

Md Marijuana Card Express

Md Marijuana Card Express Getting a medical marijuana card in Maryland is actually pretty simple. All you have to do is follow a few easy

Marijuana Jokes for Adults

Marijuana Jokes for Adults Marijuana jokes for grown-ups are like hitting a high-quality strain – they deliver just the right buzz when you need a

Best Marijuana Strains for Ptsd

Best Marijuana Strains for Ptsd Key Takeaways To effectively manage symptoms of PTSD, it is essential to recognize the specific requirements of individuals with this