Security readout for executives and security teams
Plain-English summary
A vulnerable version of the WP Fastest Cache WordPress plugin can allow attacker-controlled script content through specific plugin option parameters. This may let an attacker affect browser sessions of users who view the impacted admin/plugin page. The sources do not provide a CVSS score or evidence of active exploitation.
Executive priority
Treat as a targeted remediation item for WordPress estates, especially public business sites with privileged admin users. It is not KEV-listed and lacks a severity score, but vulnerable plugin exposure should be removed during routine patch cycles.
Technical view
CVE-2018-17585 describes XSS in WP Fastest Cache 0.8.8.5 through the wpfastestcacheoptions wpFastestCachePreload_number or wpFastestCacheLanguage parameters. A referenced advisory title indicates CSRF and multiple stored XSS, but the provided bundle does not fully document prerequisites, fixed versions, or exploitation details.
Likely exposure
Exposure is likely limited to WordPress sites running WP Fastest Cache plugin version 0.8.8.5. Sites without this plugin version are not shown affected by the supplied sources.
Exploitation context
CISA KEV status is false, and the supplied sources do not claim active exploitation. The risk is still relevant because XSS in WordPress administration contexts can affect privileged sessions if successfully triggered.
Researcher notes
The public bundle is sparse: no CVSS vector, CWE, CPE, fixed version, or complete exploit prerequisites are provided. Analysis should stay anchored to WP Fastest Cache 0.8.8.5 and the named parameters until vendor or advisory details are confirmed.
Mitigation direction
- Inventory WordPress sites for WP Fastest Cache version 0.8.8.5.
- Check WP Fastest Cache vendor guidance for a fixed or supported version.
- Upgrade, disable, or remove the plugin if no supported fix is available.
- Restrict WordPress administrative access to trusted users and networks.
- Review recent administrative activity for unexpected plugin setting changes.
Validation and detection
- Confirm whether WP Fastest Cache is installed on each WordPress instance.
- Record the installed plugin version from WordPress administration or asset inventory.
- Check whether vulnerable plugin option fields contain unexpected script-like content.
- Verify the plugin has been upgraded, disabled, or removed after remediation.
- Review web application logs for suspicious access to plugin options pages.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-17585 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://docs.google.com/document/d/17JSC97ecikWalB_ZTScNipFoud2aFXb5mXEZ7g-KIQI/edit?usp=sharingCVE reference · x_refsource_MISC
- https://ansawaf.blogspot.com/2019/04/csrf-multiple-stored-xss-in-wp-fastest.htmlCVE reference · x_refsource_MISC
- https://wpvulndb.com/vulnerabilities/9696CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.