Unauthorized Data Modification in WP Fastest Cache Plugin for WordPress

CVE-2023-1928

Summary

The WP Fastest Cache plugin for WordPress is affected by a vulnerability that allows authenticated attackers with subscriber-level access to modify data improperly. This is due to the absence of a capability check in the wpfc_preload_single_callback function, which may lead to cache creation being initiated by unauthorized users. This flaw is present in versions up to and including 1.1.2 of the plugin.

References