WordPress W3 Total Cache 0.9.4.1 Race Condition Vulnerability

An information disclosure vulnerability was found in the W3 Total Cache plugin. This issue allows an attacker to hijack sensitive information, such as the administrator's session cookie. Exploiting the vulnerability is possible during a short period of time when an administrator submits the suppo...

WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting

------------------------------------------------------------------------ Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress W3 Total Cache Amazon SNS Push Messages Weak Validation

------------------------------------------------------------------------ Weak validation of Amazon SNS push messages in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress W3 Total Cache 0.9.4.1 Race Condition

------------------------------------------------------------------------ Information disclosure race condition in W3 Total Cache WordPress Plugin ------------------------------------------------------------------------ Sipke Mellema, July 2016...

W3 Total Cache <= 0.9.4.1 - Weak Validation of Amazon SNS Push Messages

The W3 Total Cache WordPress plugin was affected by a Weak Validation of Amazon SNS Push Messages security vulnerability...

W3 Total Cache <= 0.9.4 - Unauthenticated Server Side Request Forgery (SSRF)

The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery SSRF security vulnerability...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Arbitrary File Upload

This plugin is prone to an authenticated arbitrary file upload vulnerability. Solution Update the plugin...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Arbitrary File Download

This plugin is prone to authenticated arbitrary file download vulnerability. Solution Update the plugin...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Bypass

This plugin is prone to unauthenticated security token bypass vulnerability. Solution Update the plugin...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Arbitrary PHP Code Execution

This plugin is prone to an authenticated arbitrary PHP code execution vulnerability. Solution Update the plugin...

W3 Total Cache <= 0.9.4.1 – Unauthenticated Security Token Bypass

The /pub/apc.php file is used to empty the OPCache/APC. The script seems protected by a nonce aka security token: $nonce = W3Request::getstring'nonce'; $uri = $SERVER'REQUESTURI'; if wphash$uri == $nonce But the flaw stays in the == operator which is not the one to use when you want to compare...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Download

When you're creating a support ticket in the plugin page, you can add one or more of your your template themes. Then this file will be send to the author to help him resolving the issue. Now you select one, you send the form and same as for the files before, you will send it to the author to help...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary File Upload

When you're creating a support ticket in the plugin page, you can add one or more of your files from your computer. Then this file will be send to the author to help him resolving the issue. When we look at the code, W3TC is doing that: / Attach other files / if !empty$FILES'files' $files =...

WordPress W3 Total Cache Plugin <= 0.9.4.1 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

W3 Total Cache <= 0.9.4.1 – Authenticated Arbitrary PHP Code Execution

This one is so mush easy to exploit using the import settings feature, this is what W3TC will do one your file is uploaded: / Imports config content @param string $filename @return boolean / function import$filename if fileexists$filename && isreadable$filename $data = filegetcontents$filename; i...

W3 Total Cache <= 0.9.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)

The W3 Total Cache WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

W3 Total Cache <= 0.9.4.1 - Authenticated Reflected Cross-Site Scripting (XSS)

The W3 Total Cache WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC...

WordPress W3 Total Cache 0.9.4.1 Cross Site Scripting

Description: Cross-Site Scripting vulnerability was found on Wordpress W3 Total Cache w3tc plugin. + Plugin Version tested: Support - Add new ticket + Variable: requestid + Method: GET ------------------------------- + Affected URL:...

w3.knauf.ru XSS vulnerability

Vulnerable URL: http://w3.knauf.ru/map//.?q=';alert/XSSPOSED/;' Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 17:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 5...