Description

WordPress Plugin W3 Total Cache is prone to a backdoor vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Successful attacks will compromise the affected application and possibly the webserver or computer.

Remediation

Install version 0.9.2.3 downloaded after June 21st, 2011 or latest

References

http://wordpress.org/news/2011/06/passwords-reset/

http://secunia.com/advisories/45021/

Related Vulnerabilities

Apache Tomcat version older than 6.0.18

WordPress 'post.php' Cross-Site Scripting Vulnerability (1.5)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2007-6388)

MongoDb Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4650)

WordPress Plugin WordPress Facebook SQL Injection (1.0.13)

Severity

High

Classification

CWE-95 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update