Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Automattic Component: Wp Super Cache Clear all filters
TI-2021-06621 CVE-2021-24329 · GHSA-w7f6-m3xq-9982

WP Super Cache < 1.7.3 - Authenticated Stored Cross-Site Scripting (XSS)

Priority LOW 32

The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.04455 Published 2021-06-01 Fixed in 1.7.3 CWE-79
TI-2021-06604 CVE-2021-24312 · GHSA-5r22-g25f-j577

WP Super Cache < 1.7.3 - Authenticated Remote Code Execution

Priority LOW 36

The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0195 Published 2021-06-01 Fixed in 1.7.3 CWE-94
TI-2021-06501 CVE-2021-24209 · GHSA-x99c-f7pr-mjvv

WP Super Cache < 1.7.2 - Authenticated Remote Code Execution (RCE)

Priority MEDIUM 54

The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Locat…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.27671 Published 2021-04-05 Fixed in 1.7.2 CWE-94
TI-2013-01780 CVE-2013-2008 · GHSA-672r-8464-jwfg

WordPress Super Cache Plugin 1.3 has XSS.

Priority LOW 31

WordPress Super Cache Plugin 1.3 has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01797 Published 2020-02-07 No fix listed CWE-79