CVE-2024-12365: W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery
The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the isw3tcadminpage function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12365?
CVE-2024-12365 has been classified as a medium severity vulnerability.
How do I fix CVE-2024-12365?
To fix CVE-2024-12365, update the W3 Total Cache plugin to version 2.8.2 or later.
Who is affected by CVE-2024-12365?
All users of the W3 Total Cache plugin for WordPress versions up to and including 2.8.1 are affected by CVE-2024-12365.
What kind of attacks can occur due to CVE-2024-12365?
CVE-2024-12365 allows authenticated attackers with Subscriber-level access to gain unauthorized access to data.
When was CVE-2024-12365 published?
CVE-2024-12365 was published on March 10, 2024.