CVE-2023-1375: The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing...
4.3
CVSS
Description
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized cache deletion in versions up to, and including, 1.1.2 due to a missing capability check in the deleteCacheToolbar function . This makes it possible for authenticated attackers, with subscriber-level permissions and above, to delete the site's cache.
Classification
CVE ID: CVE-2023-1375
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.3
Affected Products
Vendor: emrevona
Product: WP Fastest Cache
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.08% (probability of being exploited)
EPSS Percentile: 36.19% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)
References
https://www.wordfence.com/threat-intel/vulnerabilities/id/ae643666-70cb-4eb4-a183-e1649264ded4?source=cvehttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.php#L866
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2893158%40wp-fastest-cache&new=2893158%40wp-fastest-cache&sfp_email=&sfph_mail=