WP Fastest Cache Missing Authorization Vulnerability in WordPress

A vulnerability exists in the WP Fastest Cache plugin for WordPress, affecting all versions through 1.4.0. The issue arises from a lack of proper capability checks in the wpfc_db_fix_callback() function, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify data by initiating various database fix actions. This vulnerability is present only on sites with the premium version activated.

Impact

Exploitation of this vulnerability could lead to unauthorized database modifications by authenticated users with Subscriber-level access or higher.

Remediation

Users are advised to update the WP Fastest Cache plugin to version 1.4.1 or a newer patched version.