Description
WordPress Plugin WP Rocket is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin WP Rocket version 2.10.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.10.4 or latest
References
Related Vulnerabilities
WordPress Plugin Contact Form Multi by BestWebSoft Cross-Site Scripting (1.2.0)
WordPress Plugin Carousel slideshow Arbitrary File Upload (3.11)
WordPress Plugin SEO Redirection Cross-Site Scripting (4.2)
Joomla! Core 3.0.x Security Bypass (3.0.0 - 3.0.3)
Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.10)