CVE Database /
CVE-2024-12008
CVE · Medium
CVE-2024-12008 — W3 Total Cache [w3-total-cache] < 2.8.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-12008
|
W3 Total Cache [w3-total-cache] < 2.8.2 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
5.3
|
< 2.8.2
|
2.8.2 |
2025-01-13 |
—
|
CVE-2024-12008
The W3 Total Cache plugin before version 2.8.2 contains an information disclosure flaw where debug log files are publicly accessible without authentication. An attacker can read the exposed logs to obtain sensitive data such as nonce values, which could then be leveraged for CSRF attacks. This vulnerability only affects installations where the debug feature has been manually enabled, as it is turned off by default.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings