WordPress Plugin Vulnerabilities
WP Fastest Cache <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion
Description
According to the original researcher:
"Although a successful exploit leads to data loss and potentially a DoS against the website, because wordpress won't find important files to run, there are several requirements which need to be met:
- WP Fastest Cache is installed and the cache is activated
- Wordpress is configured to use 'pretty' URL schemes, like /<data>/<title> etc.
- WP Postratings [1] is installed
- At least one ratable post or page was published"
Affects Plugins
References
Miscellaneous
Original Researcher
Sebastian Neef
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-03-10 (about 7 years ago)
Added
2019-03-10 (about 7 years ago)
Last Updated
2026-04-13 (about 29 days ago)