The AJAX handlers that add, remove and list the "clear cache on specific pages" rules in WP Fastest Cache verified only a nonce and never checked the caller's capabilities. Any authenticated user who could obtain the nonce from an admin page could change or read the site's cache-clearing rules. The fix requires the manage_options capability before... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Missing Authorization in WP Fastest Cache Specific-Pages Cache Clearing
The AJAX handlers that add, remove and list the "clear cache on specific pages" rules in WP Fastest Cache verified only a nonce and never checked the caller's capabilities. Any authenticated user who could obtain the nonce…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR