Read the docs

Automattic

Records125All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

Automattic records in CISA KEV

No Automattic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Wp Super Cache · all components

Priority MEDIUM 54

The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Locat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27671 Published 2021-04-05 Fixed in 1.7.2 CWE-94
Priority LOW 36

The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0195 Published 2021-06-01 Fixed in 1.7.3 CWE-94
Priority LOW 32

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.04455 Published 2021-06-01 Fixed in 1.7.3 CWE-79
TI-2013-01780 CVE-2013-2008 · GHSA-672r-8464-jwfg

WordPress Super Cache Plugin 1.3 has XSS.

Priority LOW 31

WordPress Super Cache Plugin 1.3 has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01797 Published 2020-02-07 No fix listed CWE-79
Open these records in search →