CVE-2015-9316

The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-08-14

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Wp Fastest Cache (Wpfastestcache)

References

• https://wordpress.org/plugins/wp-fastest-cache/#developers
• https://www.exploit-db.com/exploits/38678