Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Clearfy Cache 2.4.3 Clear all filters
TI-2026-13625 CVE-2026-16296 · GHSA-qc2w-xhvw-6xmh

Clearfy < 2.4.3 - Open Redirect via Cyrlitera 404 Handler

Priority LOW 21

The Clearfy Cache WordPress plugin before 2.4.3 does not validate the redirect target in its Cyrlitera old-URL redirect handler, passing a decoded request URI to an unsafe redirect function, which allows unauthenticated…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0029 Published 2026-08-04 Fixed in 2.4.3 CWE-601
TI-2026-13624 CVE-2026-16295 · GHSA-rxcc-hfjf-j3mp

Clearfy < 2.4.3 - Subscriber+ Sensitive Information Disclosure via Factory Page-Action Dispatcher

Priority LOW 20

The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capability check in one of its admin-page dispatch paths, allowing any authenticated user such as a Subscriber to render admin-only settings pages and di…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-08-04 Fixed in 2.4.3 CWE-284