HackFraudData Leak Vulnerability Found in WP Fastest Cache Plugin
Published: 3 Nov 2026 · Greece
A data leak vulnerability (CVE-[phone number]) affects WP Fastest Cache versions up to 1.5.3 on WordPress Multisite with public registrations. The issue could expose new user credentials but is fixed in version 1.5.4 by excluding activation pages from caching.
Who is at risk
WordPress Multisite site admins with public registrations
How to protect yourself
- Update WP Fastest Cache to version 1.5.4 or later immediately
- Disable public registrations if not needed on your WordPress Multisite
- Avoid caching activation pages until the plugin is updated
Source: SecNews.gr (GR) (secnews.gr)
Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語