CyberSecBulletin

Hostspa vulnerabilities

We track 1 vulnerability in Hostspa products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2026.

1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score

Latest Hostspa vulnerabilities

  • 7.2 High severity

    Fastcache by Host.it: Improper Control of Generation of Code

    CVE-2026-104021Hostspa

    The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[cache_cookie_exclude][]` parameter. This is due to the plugin registering the `cache_cookie_exclude` setting v