Monitor free

Report

New Known

Fixed

WordPress WP Super Cache plugin <= 1.7.1 - Authenticated Remote Code Execution (RCE) vulnerability

7.2

CVSS 3.1 score High severity

Report

Monitoring Not reported to be exploited

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

WP Super Cache

Type

Plugin

Vulnerable versions

<= 1.7.1

Fixed in

1.7.2

PSID

5573bbe45c88

CVE ID

N/A

Classification

Remote Code Execution (RCE)

OWASP Top 10

A7: Missing Function Level Access Control

Required privilege

Credits

m0ze (Patchstack Red Team)

Publicly disclosed

2021-03-16

Patchstack vPatch available since

09.12.2021

Details

Authenticated Remote Code Execution (RCE) vulnerability (settings page) discovered by m0ze (Patchstack Red Team) in WordPress WP Super Cache plugin (versions <= 1.7.1).

Solution

Update the WordPress WP Super Cache plugin to the latest available version (at least 1.7.2).

References