CVE-2017-11658: Improper Limitation of a Pathname to a Restricted Directory

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters .. -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack...

PT-2017-12154

Name of the Vulnerable Software and Affected Versions WP Rocket plugin version 2.9.3 Description The issue concerns the Local File Inclusion mitigation technique in the WP Rocket plugin, which trims traversal characters .. but is insufficient to prevent remote attacks. This weakness can be...