psaux-it/nginx-fastcgi-cache-purge-and-preload

psaux-it/nginx-fastcgi-cache-purge-and-preload

GitHubGitHub
GitHubgithub.com
WordPress Pluginwordpress.org
Releases11
Frequency1 month 2 weeks
Last Release
Stars26
Nginx Cache Purge Preload for Wordpress (NPP). The most comprehensive solution for managing Nginx (FastCGI, Proxy, SCGI, UWSGI) cache operations directly from your WordPress dashboard.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-6213↗
7.2 HIGH—

The Nginx Cache Purge Preload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.1 via the 'nppp_preload_cache_on_update' function. This is due to insufficient sanitization of the $_SERVER['HTTP_REFERERER'] parameter passed from the 'nppp_handle_fastcgi_cache_actions_admin_bar' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.