CVE-2013-2011

WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.

• CWE-116

• http://www.openwall.com/lists/oss-security/2013/04/25/4Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59473Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83800Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-2011Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/04/25/4Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/59473Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83800Third Party Advisory, VDB Entry
• https://security-tracker.debian.org/tracker/CVE-2013-2011Third Party Advisory

Published

Dec 26, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-2005X.org libXt 1.1.3 and earlier does not check the return valu…
• CVE-2013-2006OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG m…
• CVE-2013-2007The qemu guest agent in Qemu 1.4.1 and earlier, as used by X…
• CVE-2013-2008WordPress Super Cache Plugin 1.3 has XSS.6.1
• CVE-2013-2009WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Exec…8.8
• CVE-2013-2010WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Cod…9.8
• CVE-2013-2012autojump before 21.5.8 allows local users to gain privileges…7.3
• CVE-2013-2013The user-password-update command in python-keystoneclient be…
• CVE-2013-2014OpenStack Identity (Keystone) before 2013.1 allows remote at…
• CVE-2013-2015The ext4_orphan_del function in fs/ext4/namei.c in the Linux…
• CVE-2013-2016A flaw was found in the way qemu v1.3.0 and later (virtio-rn…7.8
• CVE-2013-2017The veth (aka virtual Ethernet) driver in the Linux kernel b…