CVE-2020-36836

HIGH

8.0

Descripcion

The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized arbitrary file deletion in versions up to, and including, 0.9.0.2 due to a lack of capability checking and insufficient path validation. This makes it possible for authenticated users with minimal permissions to delete arbitrary files from the server.

Detalles CVE

Puntuacion CVSS v3.18.0

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado10/16/2024

Ultima modificacion4/8/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

wpfastestcache:wp_fastest_cache

Debilidades (CWE)

CWE-352CWE-22

Referencias

https://plugins.trac.wordpress.org/changeset/2235160/wp-fastest-cache(security@wordfence.com)

https://wearetradecraft.com/advisories/tc-2020-0001/(security@wordfence.com)

https://www.wordfence.com/threat-intel/vulnerabilities/id/82f80916-37ab-4c5a-9787-2544c620acac?source=cve(security@wordfence.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.