CVE-2025-10583

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10583", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-16T20:02:55.540Z", "datePublished": "2025-12-12T07:20:35.569Z", "dateUpdated": "2026-04-15T13:53:27.464Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:08.542Z"}, "affected": [{"vendor": "emrevona", "product": "WP Fastest Cache Premium", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.7.4", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'get_server_time_ajax_request' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The free version is not affected."}], "title": "WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9e64c54-a78f-454a-a9ee-02f64b6ae83d?source=cve"}, {"url": "https://research.cleantalk.org/2025-10583"}, {"url": "https://www.wpfastestcache.com/changelog/"}, {"url": "https://research.cleantalk.org/cve-2025-10583/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N", "baseScore": 3.5, "baseSeverity": "LOW"}}], "credits": [{"lang": "en", "type": "finder", "value": "Dmitrii Ignatyev"}], "timeline": [{"time": "2025-11-19T16:38:45.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-12-11T19:17:52.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"references": [{"url": "https://research.cleantalk.org/cve-2025-10583/", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-15T13:53:24.482171Z", "id": "CVE-2025-10583", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-15T13:53:27.464Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10583", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-15T13:53:24.482171Z"}}}], "references": [{"url": "https://research.cleantalk.org/cve-2025-10583/", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-12T20:49:01.769Z"}}], "cna": {"title": "WP Fastest Cache Premium <= 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Blind Server-Side Request Forgery", "credits": [{"lang": "en", "type": "finder", "value": "Dmitrii Ignatyev"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 3.5, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N"}}], "affected": [{"vendor": "emrevona", "product": "WP Fastest Cache Premium", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.7.4"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-19T16:38:45.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-12-11T19:17:52.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9e64c54-a78f-454a-a9ee-02f64b6ae83d?source=cve"}, {"url": "https://research.cleantalk.org/2025-10583"}, {"url": "https://www.wpfastestcache.com/changelog/"}, {"url": "https://research.cleantalk.org/cve-2025-10583/"}], "descriptions": [{"lang": "en", "value": "The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'get_server_time_ajax_request' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The free version is not affected."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:08.542Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10583", "state": "PUBLISHED", "dateUpdated": "2026-04-15T13:53:27.464Z", "dateReserved": "2025-09-16T20:02:55.540Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-12-12T07:20:35.569Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WP Fastest Cache Premium", "vendor": "emrevona", "versions": [{"lessThanOrEqual": "1.7.4", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WP Fastest Cache Premium plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.7.4 via the 'get_server_time_ajax_request' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. The free version is not affected."}, {"lang": "es", "value": "El plugin WP Fastest Cache para WordPress es vulnerable a falsificaci\u00f3n de petici\u00f3n del lado del servidor en todas las versiones hasta la 1.7.4, inclusive, a trav\u00e9s de la acci\u00f3n AJAX 'get_server_time_ajax_request'. Esto permite a atacantes autenticados, con acceso de nivel Suscriptor o superior, realizar peticiones web a ubicaciones arbitrarias originadas desde la aplicaci\u00f3n web y puede utilizarse para consultar y modificar informaci\u00f3n de servicios internos."}], "id": "CVE-2025-10583", "lastModified": "2026-10-07T20:10:01.970", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10583", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-15T13:53:24.482171Z", "version": "2.0.3"}}]}, "published": "2025-12-12T08:15:47.103", "references": [{"source": "security@wordfence.com", "url": "https://research.cleantalk.org/2025-10583"}, {"source": "security@wordfence.com", "url": "https://research.cleantalk.org/cve-2025-10583/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b9e64c54-a78f-454a-a9ee-02f64b6ae83d?source=cve"}, {"source": "security@wordfence.com", "url": "https://www.wpfastestcache.com/changelog/"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://research.cleantalk.org/cve-2025-10583/"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T16:34:58.031483+00:00", "value": {"mitigation_remediation": ["Apply the latest official release of WP Fastest Cache Premium to incorporate the vendor's authorization fix, if available.", "If an immediate update is not feasible, block or disable the get_server_time_ajax_request AJAX action for all users except those explicitly allowed, for example by adding a server\u2011side whitelist or using a plugin that restricts endpoint access.", "Implement outbound request filtering or firewall rules to prevent the WordPress server from accessing internal network addresses or sensitive domains, reducing the potential impact of any remaining SRSF capability."], "summary": {"action": "Patch", "impact": "Server\u2011Side Request Forgery"}, "threat_synthesis": {"affected_systems": "All installations of WP Fastest Cache Premium version 1.7.4 or earlier are affected; the free edition is not impacted. The flaw exists in WordPress sites that have the plugin enabled and have users with Subscriber or higher roles.", "description_and_impact": "The WP Fastest Cache Premium plugin for WordPress contains a flaw in the \"get_server_time_ajax_request\" AJAX action that fails to enforce proper authorization checks. As a result, authenticated users with Subscriber-level access or higher may trigger the action to cause the server to issue HTTP requests to any target URL, potentially exfiltrating sensitive data or modifying internal services. The vulnerability leverages server\u2011side request forgery to allow attackers to probe or manipulate internal network resources without needing elevated privileges beyond a legitimate subscription role.", "risk_and_exploitability": "The CVSS score of 3.5 indicates a low to moderate severity, and the EPSS score of less than 1% suggests a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Because the attack requires an authenticated session, the likely vector involves a user who has logged in and runs a script that calls the vulnerable AJAX endpoint. While the issue does not provide remote code execution, it can lead to data disclosure or modification of internal services, which may have significant operational impact."}}}}, "created": "2025-12-14T21:16:21.631191+00:00", "updated": "2026-04-20T16:45:11.950265+00:00", "vendors": ["emrevona", "emrevona$PRODUCT$wp_fastest_cache", "wordpress", "wordpress$PRODUCT$wordpress"]}