CVE-2023-1930— WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
Quick assessment
Affected
emrevona WP Fastest Cache – WordPress Cache Plugin
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin WP Fastest Cache 1.1.2及之前版本存在跨站请求伪造漏洞，该漏洞源于缺少函数功能检查，存在跨站请求伪造。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-1930
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
Source: CVE Program / CVE List V5
Vulnerability Description
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_callback function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to delete caches.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress plugin WP Fastest Cache 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。 WordPress plugin WP Fastest Cache 1.1.2及之前版本存在跨站请求伪造漏洞，该漏洞源于缺少函数功能检查，存在跨站请求伪造。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| emrevona | WP Fastest Cache | * ~ 1.1.2 | - |
|
II. Public POCs for CVE-2023-1930
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-1930
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-1930 (1)
Vendor Advisories for CVE-2023-1930 (1)
Same Patch Batch · emrevona · 2023-04-06 · 14 CVEs total
| CVE-2023-1918 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback' |
| CVE-2023-1919 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_setti |
| CVE-2023-1920 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callba |
| CVE-2023-1921 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_aja |
| CVE-2023-1922 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_aja |
| CVE-2023-1923 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_aj |
| CVE-2023-1924 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_cal |
| CVE-2023-1925 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_c |
| CVE-2023-1926 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar' |
| CVE-2023-1927 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar' |
| CVE-2023-1928 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback' |
| CVE-2023-1929 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback' |
| CVE-2023-1931 | 4.3 MEDIUM | WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar' |
IV. Related Vulnerabilities
Same product: WP Fastest Cache – WordPress Cache Plugin
-
CVE-2025-10476
WP Fastest Cache <= 1.4.0 - Missing Authorization to Authent -
CVE-2020-36836
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Ar -
CVE-2024-4347
WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) A -
CVE-2023-1375
WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache D -
CVE-2023-1928
WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_p
Same vendor: emrevona
-
CVE-2025-10583
WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to -
CVE-2025-10476
WP Fastest Cache <= 1.4.0 - Missing Authorization to Authent -
CVE-2020-36836
WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Ar -
CVE-2024-4347
WP Fastest Cache <= 1.2.6 - Authenticated (Administrator+) A -
CVE-2023-1375
WP Fastest Cache <= 1.1.2 - Missing Authorization to Cache D
Same weakness: CWE-862
-
CVE-2026-78380
Private Group and Market Posts Disclosed Through Public Noti -
CVE-2026-76847
act 0.2.81 through 0.2.89 Missing Authorization in the Artif -
CVE-2026-78372
RansomLook Missing Authorization Allows Disclosure of Privat -
CVE-2026-78370
RansomLook Unauthenticated Database Export Exposes Private D -
CVE-2026-28190
WordPress ProLancer Element plugin <= 1.4.8 - Broken Access
V. Comments for CVE-2023-1930
No comments yet