cleantalk
Vulnerabilities and Security Researches

W3 Total Cache, 8914eae9e90e5064c78effaf3b28a4eed5695eb0

Application

W3 Total Cache

Published on
May 22, 2019
Research Description
W3 Total Cache [w3-total-cache] < 0.9.7.4 W3 Total Cache <= 0.9.7.3 - Server Side Request Forgery The W3 Total Cache plugin for WordPress is vulnerable to Server Side Request Forgery in versions up to, and including 0.9.7.3, due to insufficient user input validation in the opcache_flush_file file.
Affected versions
max 0.9.7.4.
Status
vulnerable