Lucene search
PRIOn knowledge basePRION:CVE-2023-1921HistoryApr 06, 2023 - 8:15 p.m.
Cross site request forgery (csrf)
2023-04-0620:15:00
PRIOn knowledge base
www.prio-n.com
3
wordpress
fastest cache
cross-site request forgery
vulnerable
nonce validation
cdn
unauthenticated attackers
The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the wpfc_start_cdn_integration_ajax_request_callback function. This makes it possible for unauthenticated attackers to change cdn settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_fastest_cache | le | 1.1.2 |
Related
cvelist
cvelist
CVE-2023-1921
2023-04-06 19:56:12
cve
cve
CVE-2023-1921
2023-04-06 20:15:08
nvd
nvd
CVE-2023-1921
2023-04-06 20:15:08
wpvulndb
wpvulndb
WP Fatest Cache < 1.1.3 - Multiple CSRF
2023-04-06 00:00:00
nessus
nessus
WP Fastest Cache Plugin for WordPress < 1.1.3 Multiple Vulnerabilities
2023-09-13 00:00:00
openvas
openvas
WordPress Fastest Cache Plugin < 1.1.3 Multiple Vulnerabilities
2023-06-07 00:00:00
wordfence
wordfence