Lucene search
+L

3 matches found

WPVulnDB
WPVulnDB
added 2021/05/14 12:00 a.m.38 views

WP Super Cache < 1.7.3 - Authenticated Remote Code Execution

The parameters $cachepath, $wpcachedebugip, $wpsupercachefrontpagetext, $cachescheduledtime, $cacheddirectpages used in the plugin settings result in RCE because they allow input of "$" and "\n". This is due to an incomplete fix of CVE-2021-24209. You can run the command directly to...

9CVSS7.1AI score0.27671EPSS
SaveExploits4References1Affected Software1
Rows per page
Query Builder