WordPress WP Fastest Cache Path Traversal Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. WP Fastest Cache is used in one of the plug-ins to support the generation of static HTML files. A path traversal...

CVE-2019-13635

The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal...

Directory traversal

The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal...

CVE-2019-13635

The CVE-2019-13635 entry concerns the WordPress plugin WP Fastest Cache, affected through version 0.8.9.5. The vulnerability is a Directory Traversal in files wpFastestCache.php and inc/cache.php, enabling access to files outside the intended directory. Connected sources corroborate the affected ...

WordPress WP Fastest Cache 0.8.9.5 Directory Traversal

WP Fastest Cache is a Wordpress plugin that creates static html files from the dynamic WordPress blog in order to speed up operation. Version 0.8.9.5 and below of the plugin was identified being vulnerable to directory traversal attacks. The first two are Windows only, the 3rd one is generic. The...

CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...

CVE-2019-6726

Summary: CVE-2019-6726 affects the WordPress plugin WP Fastest Cache ≤ 0.8.9.0. The vulnerability allows an unauthenticated, remote attacker to delete arbitrary files by abusing the HTTP Referer header in the functions wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache...

CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wppostratingsclearfastestcache and rmfolderrecursively in wpFastestCache.php mishandle ../ in an HTTP Referer header...

WordPress Fastest Cache Plugin < 0.8.8.6 Multiple Vulnerabilities

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

CVE-2018-17584

The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...

Design/Logic Flaw

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...

CVE-2018-17584

The WP Fastest Cache plugin 0.8.8.5 for WordPress has CSRF via the wp-admin/admin.php wpfastestcacheoptions page...

Design/Logic Flaw

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

Design/Logic Flaw

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsaveexcludepages action...

CVE-2018-17586

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules0content parameter in a wpfcsavetimeoutpages action...

CVE-2018-17586

CVE-2018-17586 affects the WordPress plugin WP Fastest Cache (version 0.8.8.5 and earlier). The issue is an XSS vulnerability via the rules[0][content] parameter in the wpfc_save_timeout_pages action. Connected sources also indicate additional vulnerabilities in the same plugin family and suggest...

CVE-2018-17585

Summary: The WP Fastest Cache WordPress plugin (versions up to 0.8.8.5; advisory texts also reference 0.8.8.6) contains a cross-site scripting (XSS) vulnerability exposed via the parameters wpFastestCachePreload_number and wpFastestCacheLanguage . The issue is confirmed across multiple sources in...

CVE-2018-17585

The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the wpfastestcacheoptions wpFastestCachePreloadnumber or wpFastestCacheLanguage parameter...