Lucene search
PRIOn knowledge basePRION:CVE-2023-1919HistoryApr 06, 2023 - 8:15 p.m.
Cross site request forgery (csrf)
2023-04-0620:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site request forgery
vulnerable plugin
nonce validation
unauthenticated attackers
cache-related settings
forged request
site administrator
The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_preload_single_save_settings_callback function. This makes it possible for unauthenticated attackers to change cache-related settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_fastest_cache | le | 1.1.2 |
Related
cve
cve
CVE-2023-1919
2023-04-06 20:15:08
cvelist
cvelist
CVE-2023-1919
2023-04-06 19:55:18
nvd
nvd
CVE-2023-1919
2023-04-06 20:15:08
wpvulndb
wpvulndb
WP Fatest Cache < 1.1.3 - Multiple CSRF
2023-04-06 00:00:00
nessus
nessus
WP Fastest Cache Plugin for WordPress < 1.1.3 Multiple Vulnerabilities
2023-09-13 00:00:00
openvas
openvas
WordPress Fastest Cache Plugin < 1.1.3 Multiple Vulnerabilities
2023-06-07 00:00:00
wordfence
wordfence