CVE-2014-8724

概要

参考情報

• packetstormsecurity.com/files/129626/W3-Total-Cache-0.9.4-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/534266/100/0/threaded
• wordpress.org/plugins/w3-total-cache/changelog · Vendor Advisory
• secuvera.de/advisories/secuvera-SA-2014-01.txt · Exploit

w3 total cache のその他の脆弱性

• CVE-2024-12365高 8.5The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_…
• CVE-2024-12008高 7.5The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the public…
• CVE-2024-12006中 5.3The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several func…
• CVE-2023-5359高 7.5The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google O…
• CVE-2021-24452中 6.1The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" paramet…