CVE-2021-20714

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
Emre Vona	WP Fastest Cache	versions prior to 0.9.1.7

References

https://jvn.jp/en/jp/JVN35240327/index.htmlThird Party Advisory
https://wordpress.org/plugins/wp-fastest-cache/Product
https://www.wpfastestcache.com/Product
https://jvn.jp/en/jp/JVN35240327/index.htmlThird Party Advisory
https://wordpress.org/plugins/wp-fastest-cache/Product
https://www.wpfastestcache.com/Product

Timeline

Published: Apr 27, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-207154.3Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier all CVE-2021-207169.8Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 CVE-2021-207176.1Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific i CVE-2021-207187.5mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vectors.CVE-2021-207196.8RFNTPS firmware versions System_01000004 and earlier, and Web_01000004 and earlier allow an attacker on the same network segment to execute CVE-2021-20724.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.CVE-2021-207209.8SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain CVE-2021-207219.8KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scrip CVE-2021-207227.8Untrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7.0L20 and the Software Download Installer prio CVE-2021-207236.1Reflected cross-site scripting vulnerability in [MailForm01] free edition (versions which the last updated date listed at the top of descrip CVE-2021-207246.1Reflected cross-site scripting vulnerability in the admin page of [Telop01] free edition ver1.0.1 and earlier allows a remote attacker to in CVE-2021-207256.1Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to