CVE-2015-4089

8.8 highEPSS 1.0%

High (8.8) in wpfastestcache wp fastest cache. EPSS 1.0% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in admin.php in WP Fastest Cache plugin before 0.8.3.5 for WordPress allow remote attackers to hijack the authentication of unspecified victims for requests that call the (1) saveOption, (2) deleteCache, (3) deleteCssAndJsCache, or (4) addCacheTimeout method via the wpFastestCachePage parameter in the WpFastestCacheOptions/ page.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2017-09-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpfastestcache:wp_fastest_cache

References

http://www.openwall.com/lists/oss-security/2015/05/26/20
https://wordpress.org/plugins/wp-fastest-cache/#developers
https://wpvulndb.com/vulnerabilities/9756
http://www.openwall.com/lists/oss-security/2015/05/26/20
https://wordpress.org/plugins/wp-fastest-cache/#developers

Check your stack JSON