CVE-2013-2009

The CVE-2013-2009 entry concerns WordPress WP Super Cache Plugin 1.2, which is vulnerable to remote PHP code execution via unsanitized input (e.g., malicious blog comments). Root cause cited as an incomplete fix for CVE-2013-2009. Impact is remote code execution on the web server as the web-serve...

CVE-2013-2008

WordPress Super Cache Plugin 1.3 has XSS...

PT-2020-7376

Name of the Vulnerable Software and Affected Versions: WordPress Super Cache Plugin version 1.3 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For WordPress Super Cache Plugin version 1.3, update to a newer version that contains a fix for this issue...

CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009...

CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009...

PT-2019-6867

Name of the Vulnerable Software and Affected Versions WP Super Cache Plugin version 1.2 Description The issue concerns remote PHP code execution in the WP Super Cache Plugin. Recommendations For WP Super Cache Plugin version 1.2, update to a newer version that contains a fix for this issue...

PT-2019-6868

Name of the Vulnerable Software and Affected Versions WordPress W3 Super Cache Plugin versions prior to 1.3.2 Description The issue is a PHP code-execution vulnerability that could allow remote attackers to inject arbitrary code. This is due to an incomplete fix for a previous issue...

W3 Total Cache Plugin for WordPress < 0.9.4 Arbitrary File Read

The WordPress W3 Total Cache Plugin installed on the remote host is affected by an arbitrary file read vulnerability due to improper sanitization of user-supplied input. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

Sql injection

The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfcwppollsajaxrequest via the pollid parameter...

WordPress WP Fastest Cache Path Traversal Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WP Fastest Cache is used in one of the plug-ins to support the generation of static HTML files. A path traversal...

CVE-2019-13635

The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal...

PT-2019-13229

Name of the Vulnerable Software and Affected Versions VeronaLabs wp-statistics plugin versions prior to 12.6.7 Description An issue was discovered in the plugin, where the "v1/hit" endpoint of the API is vulnerable to unauthenticated blind SQL Injection when the non-default "use cache plugin"...

W3 Total Cache Plugin for WordPress < 0.9.7.4 Multiple Vulnerabilities

The WordPress W3 Total Cache Plugin installed on the remote host is affected by multiple vulnerabilities : - A Cross-Site Scripting XSS vulnerability exists due to improper validation of user-supplied input in command parameter of /w3-total-cache/pub/opcache.php. - A Server Side Request Forgery...

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-17586

CVE-2018-17586 affects the WordPress plugin WP Fastest Cache (version 0.8.8.5 and earlier). The issue is an XSS vulnerability via the rules[0][content] parameter in the wpfc_save_timeout_pages action. Connected sources also indicate additional vulnerabilities in the same plugin family and suggest...

CVE-2018-17585

Summary: The WP Fastest Cache WordPress plugin (versions up to 0.8.8.5; advisory texts also reference 0.8.8.6) contains a cross-site scripting (XSS) vulnerability exposed via the parameters wpFastestCachePreload_number and wpFastestCacheLanguage . The issue is confirmed across multiple sources in...

PT-2019-18281 · Frederick Townes · W3 Total Cache

Name of the Vulnerable Software and Affected Versions: W3 Total Cache plugin versions prior to 0.9.4 Description: The issue allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data. This is due to a lack of proper access control in the API,...

WordPress WP Fastest Cache plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL server set up a personal blog site.WP Fastest Cache is one of the caching plugin. A cross-site request forgery vulnerability exists in the...

WordPress Fastest Cache Plugin < 0.8.3.5 CSRF Vulnerability

The WordPress plugin Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Plugin W3 Total Cache 'admin.php' Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language. w3 Total Cache is one of the blog optimization plug-ins. A cross-site scripting vulnerability exists in the WordPress plugin W3 Total Cache 'admin.php' 0.9.4.1 and earlier. An attacker can...