What’s Vulnerable › Vulnerabilities

CVE-2023-6063: WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 73.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-04 · updated 2026-06-17
• Weakness: CWE-89

Description

The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Affected products

• emrevona WP Fastest Cache – WordPress Cache Plugin: before 1.2.2 — fixed in 1.2.2

How to fix

Upgrade to a fixed version: emrevona WP Fastest Cache – WordPress Cache Plugin 1.2.2. Check the vendor advisory for mitigations.

References

• https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/
• https://wpscan.com/vulnerability/30a74105-8ade-4198-abe2-1c6f2967443e
• https://wpscan.com/blog/unauthenticated-sql-injection-vulnerability-addressed-in-wp-fastest-cache-1-2-2/
• https://wpscan.com/vulnerability/30a74105-8ade-4198-abe2-1c6f2967443e

Get alerted when CVE-2023-6063 or the next vulnerability affects your stack