Server-Side Request Forgery Vulnerability in WP Fastest Cache Plugin

CVE-2025-10583

What is CVE-2025-10583?

The WP Fastest Cache plugin for WordPress is exposed to a Server-Side Request Forgery vulnerability in all versions up to and including 1.7.4. This issue arises through the 'get_server_time_ajax_request' AJAX action, allowing authenticated users with Subscriber-level access or higher to initiate web requests to arbitrary locations from the web application. This can potentially lead to unauthorized queries and modifications of sensitive information within internal services, compromising the overall security of the application and its data.

References