CVE-2019-6715 W3 Total Cache 0.9.2.6-0.9.3 - Unauthenticated File Read / Directory Traversal · CloudMap

高危CVE-2019-6715

W3 Total Cache 0.9.2.6-0.9.3 - Unauthenticated File Read / Directory Traversal

披露于 2019/04/01 · 更新于 2025/10/15

CVSS 评分7.5/ 10.0

EPSS 概率92.2%百分位 99.7%

漏洞描述

WordPress plugin W3 Total Cache before version 0.9.4 allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data via pub/sns.php.

影响产品

boldgridw3_total_cache查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

vinhjaxt.github.iohttps://vinhjaxt.github.io/2019/03/cve-2019-6715↗packetstormsecurity.comhttp://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Directory-Traversal.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-6715↗github.comhttps://github.com/random-robbie/cve-2019-6715↗

RELATED INTELLIGENCE

同产品关联漏洞

与 w3_total_cache 相关的其他公开漏洞。

查看全部 →

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2026-5032 W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure w3_total_cache	高危	—	—	PoCEXP	2026/09/30
CVE-2026-9282 W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read w3_total_cache	高危	—	—	PoCEXP	2026/07/28
CVE-2024-12008 W3 Total Cache < 2.8.2 - Log File Exposure w3_total_cache	中危	—	—	PoCEXP	2026/06/25
wp_w3_total_cache_fpd WordPress W3 Total Cache - Full Path Disclosure w3_total_cache	低危	—	—	PoCEXP	2026/01/14
w3c_total_cache_ssrf Wordpress W3C Total Cache <= 0.9.4 - Server Side Request Forgery (SSRF) w3_total_cache	中危	—	—	PoCEXP	2023/10/20
CVE-2021-24452 W3 Total Cache < 2.1.5 - Cross-Site Scripting w3_total_cache	中危	6.1	9.6%	PoCEXP	2021/07/19