CVE-2013-2010

CVE-2013-2010 affects WordPress W3 Total Cache Plugin up to version 0.9.2.8, enabling a remote PHP code execution via crafted input. The root cause is improper handling of macros (e.g., mfunc) in the plugin, allowing arbitrary PHP code execution on the server. Exploitation activity is evidenced b...

CVE-2021-24209

CVE-2021-24209 affects the WP Super Cache WordPress plugin prior to 1.7.2. It enables an authenticated (admin+) RCE via the Settings → Cache Location option due to input validation failure and a weak $cache_path check, with direct access to wp-cache-config.php permitting web shell injection. Rela...

CVE-2013-2009

The CVE-2013-2009 entry concerns WordPress WP Super Cache Plugin 1.2, which is vulnerable to remote PHP code execution via unsanitized input (e.g., malicious blog comments). Root cause cited as an incomplete fix for CVE-2013-2009. Impact is remote code execution on the web server as the web-serve...

CVE-2021-24312

WP Super Cache plugin for WordPress is affected (versions before 1.7.3). The vulnerability arises from the settings parameters (e.g., $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages) allowing input of '$' and '\n', enabling remote code...

CVE-2013-2008

The CVE-2013-2008 entry concerns WordPress Super Cache Plugin 1.3 with multiple URI-based XSS vulnerabilities in trunk/plugins/domain-mapping.php, trunk/plugins/awaitingmoderation.php, trunk/plugins/badbehaviour.php, and trunk/wp-cache.php, as reported by several sources. Root cause: XSS in plugi...

CVE-2021-24329

CVE-2021-24329 affects the WordPress WP Super Cache plugin, specifically versions before 1.7.3. The vulnerability arises because the plugin does not properly sanitize the wp_cache_location parameter in its Settings, enabling a stored cross-site scripting (XSS) condition. Impact is described as a ...