CVE-2026-107763
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to add or remove the plugin's page-cache rewrite rules in the site's root .htaccess file.
Risk Assessment
An attacker can modify .htaccess rules, potentially disrupting site operation, causing redirections, or other unwanted effects.
Recommendation
Update the Fastcache by Host.it plugin to a version newer than 1.7.5 that fixes this vulnerability. Verify the integrity of the .htaccess file and restrict permissions to edit it.
Other vulnerabilities in Fastcache by Host.it
Original NVD description (English source)
The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to add or remove the plugin's page-cache rewrite rules in the site's root .htaccess file.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS