CVE-2019-6726

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jul 29, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-67278.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67286.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iCVE-2019-67298.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67308.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader. User interaction is requirCVE-2019-67318.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF. User interaction is reCVE-2019-67326.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67336.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67346.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit PhantomPDF. User interactiCVE-2019-67356.5This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction iCVE-2019-67368.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intCVE-2019-67378.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User intCVE-2019-67388.8This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User int
CVE-2019-6726: Medium severity, CVSS 6.5 | Vulnix