WordPress Plugin Vulnerabilities

W3 Total Cache < 0.9.7.4 - Cryptographic Signature Bypass

Description

The return value of `openssl_verify` is not properly validated, which allows to bypass the cryptographic check.

Affects Plugins

Plugin icon
w3-total-cache
Fixed in 0.9.7.4

References

URL
https://plugins.trac.wordpress.org/changeset/2081515/w3-total-cache#file21

Miscellaneous

Original Researcher
Thomas Chauchefoin
Verified
No
WPVDB ID
f8409eab-b434-468d-9a0a-66e8bb85d4fc

Timeline

Publicly Published
2019-05-06 (about 7 years ago)
Added
2019-05-06 (about 7 years ago)
Last Updated
2026-04-13 (about 1 month ago)

Other

Published
Title
Published
2022-03-25
Title
Safe SVG < 1.9.10 - SVG Sanitisation Bypass
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Captcha Bypass
Published
2022-12-29
Title
Passster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access
Published
2021-06-07
Title
Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass
Published
2016-03-22
Title
Memphis Document Library Plugin <= 3.1.5 - Arbitrary File Download