5.8
CVSSv2

CVE-2019-6726

Published: 29/07/2019 Updated: 24/08/2020
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 4.2 | Exploitability Score: 2.2
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P

Vulnerability Summary

The WP Fastest Cache plugin up to and including 0.8.9.0 for WordPress allows remote malicious users to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

wpfastestcache wp fastest cache

Exploits

WordPress WP Fastest Cache plugin versions 0890 and below suffer from an arbitrary file deletion vulnerability ...