Authorization Bypass in Fastcache Plugin by Host.it for WordPress

CVE-2026-107763

What is CVE-2026-107763?

The Fastcache plugin developed by Host.it for WordPress is susceptible to an authorization bypass vulnerability, affecting all versions up to and including 1.7.5. This flaw arises from the plugin's failure to adequately verify user permissions during action requests, which allows authenticated attackers with subscriber-level access or higher to manipulate and alter the site's essential .htaccess file. Such unauthorized changes can lead to potential exposure of sensitive data or disruption of website functionality.

References