CVE-2019-6715

High · 7.5

CVSS

7.5

EPSS

19.4%

Published

Apr 1, 2019

CISA due date

—

The record

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

Affected packages

Ecosystem	Package	Introduced	Fixed