Lucene search
GoogleOSV:CVE-2021-24209HistoryApr 05, 2021 - 7:15 p.m.
CVE-2021-24209
2021-04-0519:15:17
Google
osv.dev
5
wp super cache
rce
input validation
web shell
wordpress plugin
The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Location option. Direct access to the wp-cache-config.php file is not prohibited, so this vulnerability can be exploited for a web shell injection.
Related
checkpoint_advisories
checkpoint_advisories
WordPress Super Cache Plugin Remote Code Execution (CVE-2021-24209)
2021-04-25 00:00:00
prion
prion
Input validation
2021-04-05 19:15:00
Design/Logic Flaw
2021-06-01 14:15:00
openvas
openvas
WordPress WP Super Cache Plugin < 1.7.2 RCE Vulnerability
2021-03-19 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)
2021-03-16 00:00:00
cve
cve
CVE-2021-24209
2021-04-05 19:15:17
CVE-2021-24312
2021-06-01 14:15:08
nvd
nvd
CVE-2021-24209
2021-04-05 19:15:17
CVE-2021-24312
2021-06-01 14:15:08
wpexploit
wpexploit
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)
2021-03-16 00:00:00
osv
osv
CVE-2021-24312
2021-06-01 14:15:08