WordPress Plugin Vulnerabilities

W3 Total Cache < 0.9.5 - Information Disclosure Race Condition

Description

The W3 Total Cache WordPress plugin was affected by an Information Disclosure Race Condition security vulnerability.

Affects Plugins

Plugin icon
w3-total-cache
Fixed in 0.9.5

References

URL
https://sumofpwn.nl/advisory/2016/information_disclosure_race_condition_in_w3_total_cache_wordpress_plugin.html
URL
https://seclists.org/fulldisclosure/2016/Nov/62

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
e9f01529-7f46-4044-aee2-bdda910cb6ac

Timeline

Publicly Published
2016-11-10 (about 9 years ago)
Added
2016-11-14 (about 9 years ago)
Last Updated
2026-04-13 (about 1 month ago)

Other

Published
Title
Published
2014-08-01
Title
OpenInviter - Error Log Information Disclosure
Published
2014-08-01
Title
Image News Slider 3.2 - Multiple Unspecified Remote Issues
Published
2014-08-01
Title
Acumbamail 1.0.4 - acumbamail.class.php callAPI() Function MitM Information Disclosure
Published
2016-11-08
Title
Post Grid <= 2.0.12 - Unauthenticated Arbitrary File Deletion
Published
2025-01-29
Title
WooCommerce Wishlist < 1.8.8 - Unauthenticated Wishlist Disclosure via download_pdf_file Function