CVE-2019-6715

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

19.40% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high

Published

2019-04-01

Updated

2024-08-04

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Dire…
• https://vinhjaxt.github.io/2019/03/cve-2019-6715
• random-robbie/cve-2019-671511★ · 2019-11-12

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6715.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2017-5638
• CVE-2019-18935
• CVE-2019-5418
• CVE-2019-7616
• CVE-2020-0688
• CVE-2022-23131