Missing Authorization in WP Fastest Cache Varnish Cache Actions

The Varnish integration in WP Fastest Cache exposed AJAX actions that save, start, pause and remove the Varnish configuration, and an action that purges the Varnish cache, while verifying only a nonce and never the caller's capabilities. Any authenticated user able to obtain the nonce could change the site's Varnish server settings or force a full... Weiterlesen