CVE-2019-6726

The WP Fastest Cache plugin through 0.8.9.0 for WordPress allows remote attackers to delete arbitrary files because wp_postratings_clear_fastest_cache and rm_folder_recursively in wpFastestCache.php mishandle ../ in an HTTP Referer header.

• CWE-22

• https://packetstormsecurity.com/files/152042Exploit, Third Party Advisory, VDB Entry
• https://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.phpThird Party Advisory
• https://wordpress.org/plugins/wp-fastest-cache/Product
• https://wordpress.org/plugins/wp-fastest-cache/#developersRelease Notes
• https://www.wpfastestcache.com/Product
• https://packetstormsecurity.com/files/152042Exploit, Third Party Advisory, VDB Entry
• https://plugins.trac.wordpress.org/browser/wp-fastest-cache/trunk/wpFastestCache.phpThird Party Advisory
• https://wordpress.org/plugins/wp-fastest-cache/Product
• https://wordpress.org/plugins/wp-fastest-cache/#developersRelease Notes
• https://www.wpfastestcache.com/Product

Published

Jul 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6714An issue was discovered in BlogEngine.NET through 3.3.6.0. A…
• CVE-2019-6715pub/sns.php in the W3 Total Cache plugin before 0.9.4 for Wo…7.5
• CVE-2019-6716An unauthenticated Insecure Direct Object Reference (IDOR) i…
• CVE-2019-6719An issue has been found in libIEC61850 v1.3.1. There is a us…
• CVE-2019-6724The barracudavpn component of the Barracuda VPN Client prior…
• CVE-2019-6725The rpWLANRedirect.asp ASP page is accessible without authen…
• CVE-2019-6727This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2019-6728This vulnerability allows remote attackers to disclose sensi…6.5
• CVE-2019-6729This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2019-6730This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2019-6731This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2019-6732This vulnerability allows remote attackers to disclose sensi…6.5