CVE-2023-1925

CVE-2023-1925 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WP Fastest Cache plugin for WordPress, specifically versions up to and including 1.1.2. This flaw stems from inadequate nonce validation within the wpfc_clear_cache_of_allsites_callback function. An unauthenticated attacker could exploit this by tricking a site administrator into clicking a malicious link, leading to the clearing of the website's cache. The vulnerability has a CVSS score of 4.3 (Medium), indicating a low attack complexity and no confidentiality or integrity impact, but a low availability impact. It requires user interaction (UI:R) for successful exploitation. Currently, there is no evidence of active exploitation, nor are there any publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.