CVE-2023-1919, CVE-2023-1920, CVE-2023-1921, CVE-2023-1923, CVE-2023-1924, CVE-2023-1925, CVE-2023-1926, CVE-2023-1927
The WP Fastest Cache plugin for WordPress through version 1.1.2 contains a Cross-Site Request Forgery vulnerability in the wpfc_preload_single_save_settings_callback function due to insufficient nonce verification. An unauthenticated attacker could modify cache settings by crafting a malicious request, provided they can persuade an administrator to click a link or perform another action. This flaw allows unauthorized alterations to the plugin's configuration without proper authentication checks.
Based on public CVE data (MITRE/NVD).