Unknown Wp Fastest Cache vulnerabilities

CVE-2021-24869 [HIGH] CWE-89 CVE-2021-24869: The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_t The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low privilege users such as subscriber

CVE-2021-24870 [MEDIUM] CWE-352 CVE-2021-24870: The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_inte The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload

CVE-2023-6063 [HIGH] CWE-89 CVE-2023-6063: The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

CVE-2023-1938 [HIGH] CWE-918 CVE-2023-1938: The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and d The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue