WordPress security by component

Aruba HiSpeed Cache

Plugin description

Aruba HiSpeed Cache is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Apr 10, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: aruba-hispeed-cache

Latest vulnerability

CVE-2026-1924: Aruba HiSpeed Cache: Cross-site request forgery

Aruba HiSpeed Cache is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 3.0.4.

PublishedApr 10, 2026

Known safe version> 3.0.4

		Safe version
Apr 10, 2026	CVE-2026-1924 Aruba HiSpeed Cache: Cross-site request forgery Aruba HiSpeed Cache is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request. The published affected range is <= 3.0.4.	> 3.0.4	CVE4.3 NVDPending
Feb 23, 2026	CVE-2026-23694 Aruba Hispeed Cache: Cross-site request forgery Aruba Hispeed Cache is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE5.1 NVDPending
Feb 19, 2026	CVE-2026-23545 Aruba HiSpeed Cache: A security weakness Aruba HiSpeed Cache is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending
Feb 19, 2026	CVE-2025-11725 Aruba HiSpeed Cache: A security weakness Aruba HiSpeed Cache is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending
Feb 19, 2026	CVE-2025-11706 Aruba HiSpeed Cache: Cross-site scripting Aruba HiSpeed Cache is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending
Jan 08, 2026	CVE-2025-67913 Aruba HiSpeed Cache: A security weakness Aruba HiSpeed Cache is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending
Nov 01, 2024	CVE-2024-43119 Aruba HiSpeed Cache: A security weakness Aruba HiSpeed Cache is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Dec 19, 2023	CVE-2023-44983 Aruba HiSpeed Cache: A security weakness Aruba HiSpeed Cache is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD7.5