What’s Vulnerable › Vulnerabilities

CVE-2019-6726

• Severity: medium (CVSS 6.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-29 · updated 2026-06-17
• Weakness: CWE-22

Description

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.

Affected products

• emrevona WP Fastest Cache – WordPress Cache Plugin: through 0.8.9.0

References

• https://packetstormsecurity.com/files/152042
• https://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.php
• https://wordpress.org/plugins/wp-fastest-cache/
• https://wordpress.org/plugins/wp-fastest-cache/#developers
• https://www.wpfastestcache.com/
• https://packetstormsecurity.com/files/152042
• https://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.php
• https://wordpress.org/plugins/wp-fastest-cache/
• https://wordpress.org/plugins/wp-fastest-cache/#developers
• https://www.wpfastestcache.com/

Get alerted when CVE-2019-6726 or the next vulnerability affects your stack