Description

WordPress plugin W3 Total Cache has a security issue that can occur if using database caching to disk. When database caching to disk with a web server with directory listing or web accessible wp-content/w3tc/dbcache/* directories an attacker can predict the names of cache files and retrieve their contents.

Remediation

Upgrade to W3 Total Cache version 0.9.2.5 or later.

References

WordPress Remote Exploit - W3 Total Cache

W3 Total Cache changelog

Related Vulnerabilities

Liferay DXP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42121)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12646)

MySQL CVE-2019-2536 Vulnerability (CVE-2019-2536)

Omeka Server-Side Request Forgery (SSRF) Vulnerability (CVE-2023-3981)

Oracle JRE CVE-2013-5802 Vulnerability (CVE-2013-5802)

Severity

High

Classification

CVE-2012-6077 CVE-2012-6078 CVE-2012-6079 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure Known Vulnerabilities