Vulnerability in WordPress plugin "WP Fastest Cache
On October 14, the Jetpack Scan team published a recently discovered SQL injection bug. If exploited, this bug can give attackers access to sensitive information from the database, such as usernames and encrypted passwords. A prerequisite for exploiting the vulnerability is the use of the Classic Editor plugin in the backend (installed and enabled).
SQL injection and stored XSS using CSRF
Affected plugins: WP Fastest Cache/ Classic Editor
The Jetpack Scan team published a recently discovered security-related vulnerability in the popular "WP Fastest Cache" plugin, which occurs in conjunction with the "Classic Editor" plugin. The following information should serve to provide an indication of the issue as soon as possible and ensure a point of contact for those seeking assistance.
WP Fastest Cache has a serious security vulnerability
SQL injection with XSS and CSFR
On October 14, the Jetpack Scan team published a recently discovered SQL injection bug. If exploited, this bug can give attackers access to sensitive information from the database, such as usernames and encrypted passwords. A prerequisite for exploiting the vulnerability is the use of the Classic Editor plugin in the backend (installed and enabled).
Now, if by means of CSRF (cross-site request forgery) and stored (persistent) cross-site scripting (XSS) the WP web application was infiltrated, it is possible for the attacker to perform any action of the administrator who was targeted by the attack.
More than a million WP sites use the WP Fastest Cache plugin.
If we already regularly update your WordPress instances, they are already secure.
If you have any questions, simply contact our experts , we will be happy to help you check the specific security gap and keep your WordPress installation up to date.
No sooner have you gotten used to the constant stream of well -known social media platforms Facebook, YouTube, Instagram and Twitter than the next big player called TikTok is just around the corner. What is this TikTok and can these platforms be a real benefit for companies ? We want to discuss this in more detail in this blog post.
Newsletter
We keep you up to date on online marketing, development and design topics. Short and to the point, but with exciting content to apply and share with the team.
