W3 Total Cache, dc96b31f0157331474aacdc40f3c0d7ac7c77a12

CVE, Research URL: dc96b31f0157331474aacdc40f3c0d7ac7c77a12
Home page URL: Security reports for W3 Total Cache
Application: W3 Total Cache
Published on: Sep 26, 2016
Research Description: W3 Total Cache [w3-total-cache] < 0.9.5 W3 Total Cache <= 0.9.4.1 - Authenticated Arbitrary File Download The W3 Total Cache plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 0.9.4.1 This can allow an administrator attacker to extract sensitive data from wp-config.php that could be used to fully take over the site.
Affected versions: max 0.9.5.
Status: vulnerable