CVE-2023-1928

Name of the Vulnerable Software and Affected Versions WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2

Description The issue allows unauthorized data modification due to a missing capability check on the wpfc preload single callback function. This makes it possible for authenticated attackers with subscriber-level access to initiate cache creation.

Recommendations For WP Fastest Cache plugin for WordPress versions up to, and including, 1.1.2, consider disabling the wpfc preload single callback function until a patch is available to prevent unauthorized cache creation.