01 Record

CVE-2026-19760

WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

HighPUBLISHEDCNA: Wordfence

CNA base score7.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

View raw JSON

02 Description

WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: Not scored by EPSS
EPSS percentile: Not scored by EPSS
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Not recorded
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-26 05:30Z33 MIN AGO

Last updated

2026-08-26 05:30Z33 MIN AGO

Reserved

2026-08-13

Assigning CNA

Wordfence

Record state

PUBLISHED

Severity

High (CVSS 7.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Base

Data version

5.2

Document digest

6dfe3cbfa1def19a434b583046515756d3d3f1835b09a9705cc602de588c773d

05 Affected products

VendorProductVersionsPlatforms

emrevonaWP Fastest Cache – WordPress Cache Plugin0 to 1.5.0—

06 References

www.wordfence.comhttps://www.wordfence.com/threat-intel/vulnerabilities/id/69a22238-88e8-4ff5-8e2b-8c58a04ff154?source=cve
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.5.0/inc/js-utilities.php#L274
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.5.0/inc/js-utilities.php#L257
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.5.0/wpFastestCache.php#L507
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.4.9/inc/js-utilities.php#L274
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.4.9/inc/js-utilities.php#L257
plugins.trac.wordpress.orghttps://plugins.trac.wordpress.org/browser/wp-fastest-cache/tags/1.4.9/wpFastestCache.php#L507

CVE-2026-19760

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Description

03 Metadata

04 Affected products

05 References

CVE-2026-19760

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References