CVE-2023-49746: WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)
Published Dec 7, 2023
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Softaculous Team SpeedyCache – Cache, Optimization, Performance.This issue affects SpeedyCache – Cache, Optimization, Performance: from n/a through 1.1.2.
Affected Software
1 affected component
Softaculous Speedycache Wordpress<1.1.3
Remediation
Information
Update to 1.1.3 or a higher version.
Event History
Dec 7, 2023
CVE Published
via MITRE·10:50 AM
Data Sourced
via MITRE·10:50 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-49746?
The severity of CVE-2023-49746 is classified as high due to the potential for server-side request forgery.
2
How do I fix CVE-2023-49746?
To fix CVE-2023-49746, update the SpeedyCache plugin to version 1.1.3 or later.
3
Which versions of Softaculous SpeedyCache are affected by CVE-2023-49746?
CVE-2023-49746 affects all versions of Softaculous SpeedyCache from n/a up to and including 1.1.2.
4
What is server-side request forgery as described in CVE-2023-49746?
Server-side request forgery (SSRF) allows an attacker to make requests from the server to internal or external domains, potentially leading to unauthorized access.
5
Is there a known exploit for CVE-2023-49746?
As of now, there are no publicly disclosed exploits specifically targeting CVE-2023-49746.