← CVE Intelligence

CVE-2023-1938

WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF PUBLISHED

Description (CNA)

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

Affected (CNA)

Vendor / productVersions
Unknown / WP Fastest Cacheaffected 0 before 1.1.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.