CVE-2023-1938

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: May 30, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-19394.3No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remot CVE-2023-19409.1A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects CVE-2023-19419.8A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issu CVE-2023-19429.8A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerabi CVE-2023-19438.8Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.CVE-2023-19447.8This vulnerability enables ssh access to minikube container using a default password.CVE-2023-19456.5Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerabil CVE-2023-19466.1A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown pro CVE-2023-19479.8A vulnerability was found in taoCMS 3.0.2. It has been classified as critical. Affected is an unknown function of the file /admin/admin.php.CVE-2023-19486.1A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects s CVE-2023-19499.8A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown funct CVE-2023-19509.8A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability