high8.8
CVE-2023-1938
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remot…
Impact
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpfastestcache | Wp Fastest Cache | before 1.1.5 |