WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

Summary

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Timeline

1. Dec 4, 2023, 9:29 PM UTCCVE published
2. Aug 2, 2024, 8:21 AM UTCRecord last updated
3. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Unknown WP Fastest Cache

  fixed in 1.2.2

References 9