CVE-2023-1938 — WP Fatest Cache < 1.1.5 - Blind SSRF via CSRF
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, …
Published: 2023-05-30 · CVSS: 8.8 · CVSS 3.1
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7