CVE-2023-6063: WP Fastest Cache unauthenticated SQL injection

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: high.

high priorityUnauthenticated network-exploitable SQL injection with public exploit references and a very high EPSS score, though no KEV listing or confirmed active exploitation is recorded.

What it is

The WP Fastest Cache WordPress plugin before 1.2.2 fails to sanitise and escape a parameter before using it in a SQL statement, allowing SQL injection. Because the flaw is reachable without authentication, any remote visitor can attempt to manipulate database queries on an affected site.

Impact

An attacker can read data from the WordPress database, including potentially sensitive content and user records, as the CVSS vector limits impact to confidentiality. No integrity or availability impact is described in the record.

Attack surface

The vulnerability is network-reachable over HTTP with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. It is triggered through a parameter handled by the plugin.

Exploitation

The record is not listed in CISA KEV, but EPSS is very high at 0.737 (99.4th percentile) and both references are tagged Exploit, indicating public exploit information exists. No ransomware group usage is documented.

What to do

• Update WP Fastest Cache to version 1.2.2 or later.
• If immediate patching is not possible, disable or remove the plugin until it can be updated.
• Use a web application firewall to block SQL injection patterns against the plugin's endpoints.
• Audit the WordPress database and logs for signs of unauthorised query activity.
• Restrict and monitor access to WordPress administrative and plugin-facing paths.

Detection

• Review web server and WAF logs for SQL injection payloads targeting WP Fastest Cache parameters.
• Monitor database query logs for anomalous or unexpected SELECT statements originating from web requests.
• Check for unexpected changes or exfiltration of WordPress database content.
• Correlate requests to the plugin's endpoints with abnormal response sizes or error patterns.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.