Lucene search
WpvulndbWPEX-ID:92B1C6D8-51DB-46AA-BDE6-ABDFB091AAB5HistoryMay 02, 2023 - 12:00 a.m.
WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
2023-05-0200:00:00
wpvulndb
82
ssrf
csrf
wordpress
admin
exploit
EPSS
0.002
Percentile
61.7%
The plugin does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue Note: CSRF was fixed in 1.1.4, the SSRF in 1.1.5
Make a logged in admin open
https://example.com/wp-admin/admin-ajax.php?action=wpfc_check_url&url=https://127.0.0.1:443Related
wpvulndb
wpvulndb
WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
2023-05-02 00:00:00
prion
prion
Server side request forgery (ssrf)
2023-05-30 08:15:00
openvas
openvas
WordPress Fastest Cache Plugin < 1.1.5 SSRF Vulnerability
2023-06-09 00:00:00
cvelist
cvelist
CVE-2023-1938 WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
2023-05-30 07:49:14
nvd
nvd
CVE-2023-1938
2023-05-30 08:15:09
cve
cve
CVE-2023-1938
2023-05-30 08:15:09
wordfence
wordfence