Skip to content
Sign in
8.8 High

CVE-2023-1938 The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate…

Description

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

Affected products and versions

Product Affected versions Fixed in
WP Fastest Cache 1.1 earliest → < 1.1.5 1.1.5

Other CVEs of WP Fastest Cache

The 6 CVEs of WP Fastest Cache →
CVE-2026-74916 The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of tracking-related query parameters in its… 6.5 Medium CVE-2026-74932 The WP Fastest Cache WordPress plugin before 1.5.1 does not validate the Host header before using it to build the URLs… 7.5 High CVE-2021-24870 The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action,… 6.1 Medium CVE-2021-24869 The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before… 8.8 High
Track this CVE