CVE-2019-13635

The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal

published July 30, 2019

CVSS
—
EPSS
44%
Percentile
98.8
In the wild
Unconfirmed
What it is

⚠️ A sneaky directory traversal flaw lurks in the WP Fastest Cache plugin up to version 0.8.9.5! This oversight lets attackers reach beyond intended files. 🚨 Think of it like a delivery driver who has instructions to drop off packages only at the front desk, but instead, they take a shortcut through the back alley and access restricted areas. This oversight could expose sensitive files. An attacker could exploit this vulnerability to access any file on the server, potentially leaking sensitive data or even compromising the entire system. This is a major security risk!

Put simply

Think of it like a delivery driver who has instructions to drop off packages only at the front desk, but instead, they take a shortcut through the back alley and access restricted areas. This oversight could expose sensitive files. This directory traversal vulnerability in the WP Fastest Cache plugin allows attackers to manipulate file paths, letting them access files outside of the intended directories by using sequences like '../'.

What to do

An attacker could exploit this vulnerability to access any file on the server, potentially leaking sensitive data or even compromising the entire system. This is a major security risk! To protect your site, upgrade the WP Fastest Cache plugin to version 0.8.9.6 or later immediately. Additionally, perform a thorough security audit to ensure no unauthorized access has occurred. Keeping plugins updated is key! You've got this! By taking these steps, you'll make your site much safer. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.44363 · 98.8th percentile
Published
2019-07-30T12:20Z
EPSS history
Timeline
  • 30 JUL 12:20Z
    The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal
    cvelistv5