WP Fastest Cache Sensitive Information Exposure Vulnerability

Executive Summary

The WP Fastest Cache plugin for WordPress has a flaw where it exposes sensitive information. It caches responses from wp-activate.php without respecting privacy settings, storing credential-bearing activation responses in publicly accessible cache files. Attackers can retrieve plaintext usernames and passwords of recently activated Multisite registrants.

Useful 0 Not Useful 0

Detection Guidance

Check for cached wp-activate.php files in the WP Fastest Cache directory. Look for files named wp-activate-*.html or similar in the cache folder. Use commands like 'find /path/to/cache -name "wp-activate-*.html"' to locate them.

Useful 0 Not Useful 0

Impact Analysis

If you use a vulnerable version of WP Fastest Cache with a Multisite subdirectory setup and public registration enabled, attackers could steal credentials of newly registered users. This requires the victim to follow an activation link first, but once done, credentials are exposed.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates GDPR due to unauthorized exposure of personal data (credentials) and HIPAA if user credentials relate to protected health information. It breaches data protection principles requiring confidentiality and security of personal data.

Useful 0 Not Useful 0

Mitigation Strategies

Update the WP Fastest Cache plugin to the latest version. Disable caching for wp-activate.php by excluding it in the plugin settings. Review cached files for exposed credentials and rotate any potentially compromised passwords.

Useful 0 Not Useful 0