Cross-Site Request Forgery Vulnerability in WP Fastest Cache Plugin for WordPress

CVE-2023-1920

Summary

The WP Fastest Cache plugin for WordPress suffers from a Cross-Site Request Forgery vulnerability due to insufficient nonce validation in the wpfc_purgecache_varnish_callback function. This flaw allows unauthorized attackers to issue a cache purge request, potentially disrupting site performance. The exploit requires user interaction, as attackers need to trick site administrators into executing malicious links, resulting in unauthorized cache management.

References