WordPress Plugin Vulnerabilities

WP Fastest Cache <= 0.8.9.0 - Unauthenticated Arbitrary File Deletion

Description

According to the original researcher:

"Although a successful exploit leads to data loss and potentially a DoS against the website, because wordpress won't find important files to run, there are several requirements which need to be met:

- WP Fastest Cache is installed and the cache is activated
- Wordpress is configured to use 'pretty' URL schemes, like /<data>/<title> etc.
- WP Postratings [1] is installed
- At least one ratable post or page was published"

Affects Plugins

Fixed in 0.8.9.1

References

Miscellaneous

Original Researcher
Sebastian Neef
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No

Timeline

Publicly Published
2019-03-10 (about 7 years ago)
Added
2019-03-10 (about 7 years ago)
Last Updated
2026-04-13 (about 29 days ago)

Other