The WP Fastest Cache plugin up to and including 0.8.9.0 for WordPress allows remote malicious users to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wpfastestcache wp fastest cache |