CVE-2023-6063

WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

published December 4, 2023

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73708 · 99.5th percentile
Published
2023-12-04T21:29Z
EPSS history
Timeline
  • 04 DEC 21:29Z
    WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection
    cvelistv5