CVE-2024-4347: Improper Limitation of a Pathname to a Restricted Directory

The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificDeleteCache function. This makes it possible for authenticated attackers to delete arbitrary files on the server, which can include wp-config.php files of the...

PT-2024-30587 · WordPress · Wp Fastest Cache

Name of the Vulnerable Software and Affected Versions: WP Fastest Cache versions up to, and including, 1.2.6 Description: The issue allows authenticated attackers to perform Directory Traversal, enabling them to delete arbitrary files on the server. This can include wp-config.php files of the...