HexBrain

ownCloud · Report #90980

owncloud.com: WP Super Cache plugin is outdated

Validstatus
2upvotes
30 Oct 2015disclosed

How it was found

I know it might be out of scope, but I report it to be sure https://owncloud.org/wp-content/plugins/wp-super-cache/readme.txt shows version 1.4.4

and this version is prone to XSS and PHP Object injection http://z9.io/2015/09/25/wp-super-cache-1-4-5/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original