CVE-2026-107763: CWE-862 Missing Authorization in hostspa Fastcache by Host.it
Description
The Fastcache by Host.it WordPress plugin up to version 1.7.5 contains an authorization bypass vulnerability. Authenticated users with subscriber-level access or higher can modify the site's root .htaccess file by adding or removing page-cache rewrite rules without proper authorization checks. This vulnerability allows limited integrity impact but does not affect confidentiality or availability.
CVSS v3.1
Score 4.3medium
Affected software
hostspa
Fastcache by Host.it
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107763 describes an authorization bypass vulnerability (CWE-862) in the Fastcache by Host.it WordPress plugin. Versions from 0 up to and including 1.7.5 fail to properly verify user authorization before allowing modification of the plugin's page-cache rewrite rules in the root .htaccess file. This enables authenticated users with low privileges (subscriber-level and above) to alter .htaccess rules, potentially affecting site behavior related to caching.
Potential Impact
The vulnerability allows authenticated users with subscriber-level privileges or higher to modify .htaccess rewrite rules related to page caching. This could lead to integrity issues by altering how caching is handled on the site. There is no direct impact on confidentiality or availability reported. No known exploits are currently in the wild.
Mitigation Recommendations
No official patch or fix is currently documented. Users should monitor vendor advisories for updates. Until a fix is available, restrict plugin access to trusted users only and consider removing or disabling the plugin if unauthorized modification of .htaccess rules is a concern.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Wordfence
- Date Reserved
- 2026-10-08T19:10:07.035Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad2e5b12cdf04f656d883a5
Added to database: 10/17/2026, 03:04:17 UTC
Last enriched: 10/17/2026, 03:18:44 UTC
Last updated: 10/17/2026, 03:18:44 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.