CVE-2021-24869: Wpfastestcache Wp Fastest Cache

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber

Affected products

• Wpfastestcache Wp Fastest Cache: before 0.9.5 (fixed in 0.9.5)

Published 2024-01-16. Last modified 2026-06-17.