Lucene search
PRIOn knowledge basePRION:CVE-2021-24312HistoryJun 01, 2021 - 2:15 p.m.
Design/Logic Flaw
2021-06-0114:15:00
PRIOn knowledge base
www.prio-n.com
8
The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of ‘$’ and ‘\n’. This is due to an incomplete fix of CVE-2021-24209.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_super_cache | lt | 1.7.3 |
Related
osv
osv
CVE-2021-24312
2021-06-01 14:15:08
CVE-2021-24209
2021-04-05 19:15:17
cve
cve
CVE-2021-24312
2021-06-01 14:15:08
CVE-2021-24209
2021-04-05 19:15:17
cvelist
cvelist
nvd
nvd
CVE-2021-24312
2021-06-01 14:15:08
CVE-2021-24209
2021-04-05 19:15:17
checkpoint_advisories
checkpoint_advisories
WordPress Super Cache Plugin Remote Code Execution (CVE-2021-24209)
2021-04-25 00:00:00
openvas
openvas
WordPress WP Super Cache Plugin < 1.7.2 RCE Vulnerability
2021-03-19 00:00:00
WordPress WP Super Cache Plugin < 1.7.3 Multiple Vulnerabilities
2021-06-22 00:00:00
prion
prion
Input validation
2021-04-05 19:15:00
wpvulndb
wpvulndb
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)
2021-03-16 00:00:00
WP Super Cache < 1.7.3 - Authenticated Remote Code Execution
2021-05-14 00:00:00
wpexploit
wpexploit
WP Super Cache < 1.7.3 - Authenticated Remote Code Execution
2021-05-14 00:00:00
WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)
2021-03-16 00:00:00