WP Fastest Cache, 344f03abb2cfaa7e34bc63e45c771413f9001e58

CVE, Research URL: 344f03abb2cfaa7e34bc63e45c771413f9001e58
Home page URL: Security reports for WP Fastest Cache
Application: WP Fastest Cache
Published on: Feb 05, 2020
Research Description: WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.9.0.3 WP Fastest Cache <= 0.9.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server.
Affected versions: max 0.9.0.3.
Status: vulnerable