CVE-2023-1938
Published: 30 May 2023
Summary
CVE-2023-1938 is a high-severity an unspecified weakness vulnerability in Wpfastestcache Wp Fastest Cache. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 20.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
The WP Fastest Cache WordPress plugin before version 1.1.5 contains a blind server-side request forgery vulnerability. The affected component lacks a CSRF check on an AJAX action and fails to validate user-supplied input before passing it to the wp_remote_get() function, allowing an attacker-controlled URL to be fetched by the server.
An unauthenticated remote attacker can exploit the flaw by crafting a request that triggers the AJAX action, typically through social engineering that satisfies the required user interaction. Successful exploitation enables blind SSRF, which the CVSS vector rates at 8.8 impact across confidentiality, integrity, and availability.
The referenced WPScan advisory at the supplied URL identifies the issue in the plugin and points to version 1.1.5 as the corrective release that adds the missing CSRF protection and input validation.
EPSS for this CVE rose from a low baseline to a peak of 0.0822, indicating that exploitation interest increased after the May 2023 disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-24125
Vulnerability details
The WP Fastest Cache WordPress plugin before 1.1.5 does not have CSRF check in an AJAX action, and does not validate user input before using it in the wp_remote_get() function, leading to a Blind SSRF issue
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.