CVE-2019-6715 W3 Total Cache 0.9.2.6-0.9.3 - File Read / Directory Traversal

HighCVSS 7.5 EPSS 19.4%

Published: 2019-04-01 22:05
Updated: 2026-06-17 05:39
Exploit status: No public exploit known

Description

pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

Affected products

Product	Affected versions	Fixed in
BoldGrid W3 Total Cache	< 0.9.4	0.9.4
wordpress w3-total-cache(WordPress)	>= 0.9.2.6, < 0.9.4	0.9.4

References

packetstormsecurity.com exploit third-party-advisory vdb-entry
vinhjaxt.github.io exploit third-party-advisory
Wordfence Intelligence third-party-advisory
www.cve.org

CVSS v3.1

7.5 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

All scores (3)

v3.1 7.5 · nvd@nist.gov
v3.1 7.5 · wordfence
v2.0 5.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 19.40% (percentile 97.4)
CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.