CVE-2026-104006 Details
Description
The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'comment_author_*, comment_author_email_*' parameter. This makes it possible for unauthenticated attackers to extract the full name and email address of returning commenters pre-filled into comment form input fields and persisted as the site-wide cached page by any unauthenticated attacker requesting the same public URL. The read-side handler in advanced-cache.php correctly skips cached delivery for requests carrying comment_author_* cookies, but this check is absent on the write path, meaning the cache poisoning is invisible to the victim commenter yet fully exploitable by any unauthenticated attacker with no cookies.
A vulnerability allowing sensitive information exposure has been identified in the SpeedyCache WordPress plugin, in all versions through 1.4.2. The issue arises from an insecure caching configuration that fails to properly manage 'comment_author_*' and 'comment_author_email_*' parameters. This flaw enables unauthenticated attackers to retrieve full names and email addresses of returning commenters, which are pre-filled in comment form fields. The information is stored in a site-wide cached page, accessible to any unauthenticated attacker who requests the same public URL. While the plugin's read-side handler correctly bypasses cached delivery for requests with comment_author_* cookies, this safeguard is missing on the write path. As a result, the cache poisoning goes unnoticed by the affected commenters but remains fully exploitable by unauthenticated attackers without cookies.
Users are advised to update the SpeedyCache WordPress plugin to version 1.4.3 or a newer patched version.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 10, 2026CISA-ADP
Assessed Oct 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-524 | Use of Cache Containing Sensitive Information | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SpeedyCache | <= 1.4.2 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 11, 2026 | CVE Modified | CISA-ADP |
| Oct 10, 2026 | New CVE Received | [email protected] |