CVE Database /
CVE-2019-6715
CVE · High
CVE-2019-6715 — W3 Total Cache [w3-total-cache] < 0.9.4
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2019-6715
|
W3 Total Cache [w3-total-cache] < 0.9.4 |
— |
High
7.5
|
< 0.9.4
|
0.9.4 |
2019-04-01 |
—
|
CVE-2019-6715
The W3 Total Cache plugin versions 0.9.2.6 through 0.9.3 contains a file disclosure vulnerability in the pub/sns.php script that enables unauthenticated attackers to retrieve arbitrary files from the server by manipulating the SubscribeURL parameter within SubscriptionConfirmation JSON payloads. This flaw was remedied in version 0.9.4 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings