CVE-2023-1938 WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF

2023-05-3007:49:14

WPScan

www.cve.org

wp fastest cache

blind ssrf

csrf

wordpress plugin

wp_remote_get

ajax action

AI Score

8.9

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "WP Fastest Cache",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "1.1.5"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]