CVE-2013-2011
HIGH
8.8
CVSS 3.1
Description
WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.
Affected products and versions
- Super Cache Plugin Super Cache Plugin — Version 1.3.2
- automattic w3_super_cache — Before 1.3.2
References
- www.openwall.com http://www.openwall.com/lists/oss-security/2013/04/25/4 Exploit, Mailing List, Third Party Advisory
- www.securityfocus.com http://www.securityfocus.com/bid/59473 Third Party Advisory, VDB Entry
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/83800 Third Party Advisory, VDB Entry
- security-tracker.debian.org https://security-tracker.debian.org/tracker/CVE-2013-2011 Third Party Advisory
- nvd.nist.gov Official NVD record