CVE-2019-6715

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

19.40% chance of exploitation in the next 30 days, 97th percentile

Nuclei

high

Published

2019-04-01

Updated

2024-08-04

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Dire…
• https://vinhjaxt.github.io/2019/03/cve-2019-6715
• random-robbie/cve-2019-671511★ · 2019-11-12

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6715.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2017-5638
• CVE-2019-18935
• CVE-2019-5418
• CVE-2019-7616
• CVE-2020-0688
• CVE-2022-23131