PT-2026-103696 · WordPress · Cache Enabler
CVSS v3.1
8.7
عالية
| المتجه | AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cache Enabler WordPress plugin versions prior to 1.8.17
Description
An issue exists in the cache purge routine where a URL is not validated before being used to construct a filesystem path. Furthermore, the deletion process is not restricted to the cache directory. This allows unauthenticated users to delete arbitrary files and directories on sites where a request-derived URL is passed to the public cache-clearing hook.
Recommendations
Update Cache Enabler WordPress plugin to version 1.8.17 or later.
استغلال
إصلاح
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
تصنيف نقاط الضعف
المعرّفات ذات الصلة
المنتجات المتأثرة
Cache Enabler