Description

WordPress Plugin WP Fastest Cache is prone to multiple vulnerabilities, including local file inclusion and security bypass vulnerabilities. Exploiting these issues could allow an attacker to obtain sensitive information that could aid in further attacks or to perform otherwise restricted actions and subsequently access and make changes to the CDN (Content Delivery Network) options for the website. WordPress Plugin WP Fastest Cache version 0.8.5.7 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 0.8.5.8 or latest

References

https://www.wordfence.com/blog/2016/05/3-plugin-vulnerabilities-disclosed-yesterday/

https://www.pluginvulnerabilities.com/2016/05/25/protecting-you-against-wordfences-bad-practices-unauthorized-options-update-vulnerability-in-wp-fastest-cache/

https://www.pluginvulnerabilities.com/2016/05/26/protecting-you-against-wordfences-bad-practices-local-file-inclusion-vulnerability-in-wp-fastest-cache/

https://wordpress.org/plugins/wp-fastest-cache/changelog/

Related Vulnerabilities

PHP Other Vulnerability (CVE-2003-0249)

WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.3)

Oracle JRE CVE-2020-2655 Vulnerability (CVE-2020-2655)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.26)

WordPress Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-0194)

Severity

High

Classification

CWE-22 CWE-264 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update