{"id":29192,"date":"2016-09-28T16:24:09","date_gmt":"2016-09-28T13:24:09","guid":{"rendered":"https:\/\/blog.superhosting.bg\/en\/?p=29192"},"modified":"2022-01-31T17:38:58","modified_gmt":"2022-01-31T15:38:58","slug":"w3-total-cache-vulnerability","status":"publish","type":"post","link":"https:\/\/blog.superhosting.bg\/en\/w3-total-cache-vulnerability.html","title":{"rendered":"Injection Vulnerability in W3 Total Cache Fixed"},"content":{"rendered":"<p>Recently we detected a vulnerability in one of the most commonly used WordPress Plugins \u2013 <a href=\"https:\/\/wordpress.org\/plugins\/w3-total-cache\/\">WP Total Cache<\/a>.&nbsp;So we improved our <a href=\"https:\/\/blog.superhosting.bg\/en\/tag\/security-system\">Security system<\/a> to protect all websites hosted on <a href=\"https:\/\/en.superhosting.bg\/web-hosting-common-managed-vps.php\">Managed VPS<\/a> or <a href=\"https:\/\/en.superhosting.bg\/web-hosting-compare-hosting-plans.php\">shared hosting<\/a> plans.<\/p>\n<p>Overview:<\/p>\n<p>We detected the vulnerability within the plugin\u2019s support form as to exploit the vulnerability an admin or \u0430 user must have an active session.<\/p>\n<p>w3w3A successful attack may lead to \u0430 malicious code injection by an admin without their knowledge. Thus the hacker might gain full access to the website&#8217;s administration.<\/p>\n<div style=\"background: none repeat scroll 0% 0% #ddeef9; padding: 10px; margin: 1px;\">This issue was quickly resolved and you are safe with us. However, we highly recommend that you update the plugin to the latest available 0.9.5 version as soon as possible.<\/div>\n","protected":false},"excerpt":{"rendered":"<p>A successful attack may lead to \u0430 malicious code injection. Thus the hacker might gain full access to the website&#8217;s administration.<\/p>\n","protected":false},"author":7,"featured_media":53922,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[110],"tags":[136],"class_list":{"0":"post-29192","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-superhosting-technology-en","8":"tag-security-system"},"aioseo_notices":[],"modified_by":"\u041c\u0430\u0434\u043b\u0435\u043d\u0430 \u041c\u0435\u0442\u043e\u0434\u0438\u0435\u0432\u0430","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/comments?post=29192"}],"version-history":[{"count":2,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29192\/revisions"}],"predecessor-version":[{"id":62519,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/posts\/29192\/revisions\/62519"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media\/53922"}],"wp:attachment":[{"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/media?parent=29192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/categories?post=29192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.superhosting.bg\/en\/wp-json\/wp\/v2\/tags?post=29192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}