WordPress Plugin Vulnerabilities

WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting

Description

The plugin is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload

Affects Plugins

Plugin icon
wp-fastest-cache
Fixed in 0.9.5

References

CVE
CVE-2021-24870
URL
https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Original Researcher
Marc Montpas
Submitter
Marc Montpas
Submitter website
https://jetpack.com/blog/
Submitter twitter
marcS0H
Verified
Yes
WPVDB ID
48de63ab-2ef1-4469-8fc4-9346068bdf06

Timeline

Publicly Published
2021-10-14 (about 2 years ago)
Added
2021-10-15 (about 2 years ago)
Last Updated
2022-04-15 (about 2 years ago)

Other

Published
Title
Published
2023-10-25
Title
Export WP Page to Static HTML/CSS < 2.2.0 - Cross-Site Request Forgery via Multiple AJAX Actions
Published
2022-10-30
Title
TeraWallet – For WooCommerce < 1.4.0 - Settings Update via CSRF
Published
2023-02-21
Title
Advanced Database Cleaner <= 3.1.1 - Settings Update via CSRF
Published
2024-01-31
Title
Feed Them Social < 4.2.1 - Cross-Site Request Forgery via review_nag_check
Published
2023-09-11
Title
WooCommerce Subscriptions < 4.6.0 - Subscription Suspension/Activation via CSRF