high7.5
CVE-2023-6063
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injec…
Impact
The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpfastestcache | Wp Fastest Cache | before 1.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/
- https://wpscan.com/vulnerability/30a74105-8ade-4198-abe2-1c6f2967443e
- https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/
- https://wpscan.com/vulnerability/30a74105-8ade-4198-abe2-1c6f2967443e