2 results · Clear filters · Feed
-
Medium 4.9
SpeedyCache <= 1.3.8 - Authenticated (Administrator+) Arbitrary File Read
The SpeedyCache plugin for WordPress is vulnerable to Arbitrary File Read via Path Traversal in all versions up to, and including, 1.3.8. This is due to a mismatch between CSS URL validation (which allows query strings like `.css?...`) and path resolution (wh…
-
Medium 4.3
SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update
The SpeedyCache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the speedycache_save_varniship, speedycache_img_update_settings, speedycache_preloading_add_settings, and speedycache_preloading_delet…