CyberRota Analysis
AI-GeneratedThe WP Fastest Cache plugin for WordPress versions prior to 1.5.1 is vulnerable due to improper validation of the Host header, enabling unauthenticated attackers to manipulate cached pages. This flaw allows attackers to inject malicious JavaScript, potentially compromising the security of subsequent visitors to the affected sites. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of cache poisoning attacks.
Original NVD Description
The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs of the asset files it embeds in the pages it caches, and does not include that header in the cache key, allowing unauthenticated attackers to poison cached pages with references to a server they control and have arbitrary JavaScript run for every subsequent visitor.