CVE-2021-24869
- Reference to the description:
- Description:
- The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber
- Last updated date:
- 01/19/2024
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 01/19/2024
- Reference url to background
https://jetpack.com/2021/10/14/multiple-vulnerabilities-in-wp-fastest-cache-plugin/