CVE-2025-10583

🗓️ 12 Dec 2025 07:20:35Reported by WordfenceType

WP Fastest Cache Premium up to 1.7.4 lets authenticated subscribers trigger server-side requests via get_server_time_ajax_request.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-10583	12 Dec 202508:08	–	circl
CNNVD	WordPress plugin WP Fastest Cache 安全漏洞	12 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-10583 WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery	12 Dec 202507:20	–	cvelist
EUVD	EUVD-2025-203050	12 Dec 202507:20	–	euvd
NVD	CVE-2025-10583	12 Dec 202508:15	–	nvd
Patchstack	WordPress WP Fastest Cache Premium plugin <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery vulnerability	12 Dec 202500:16	–	patchstack
Positive Technologies	PT-2025-50897	12 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-10583	13 Dec 202508:07	–	redhatcve
Vulnrichment	CVE-2025-10583 WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery	12 Dec 202507:20	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 8, 2025 to December 14, 2025)	19 Dec 202517:57	–	wordfence

Vulners

Node

emrevona wp_fastest_cache_premiumRange≤1.7.4wordpress

[
  {
    "vendor": "emrevona",
    "product": "WP Fastest Cache Premium",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.7.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b9e64c54-a78f-454a-a9ee-02f64b6ae83d
wpfastestcache	www.wpfastestcache.com/changelog/
research	www.research.cleantalk.org/2025-10583
research	www.research.cleantalk.org/cve-2025-10583/

15 Apr 2026 15:16Current

6Medium risk

Vulners AI Score6

CVSS 3.13.5

EPSS0.0003

SSVC

CWE-862