Lightweight Cookie Notice Cookie Banner For Cookie Consent
Monthly
Sensitive information exposure in the WordPress plugin Lightweight Cookie Notice (daext) in all versions up to and including 1.19 leaks the W3TC_DYNAMIC_SECURITY constant, which the plugin hardcodes to a publicly known value; a remote, unauthenticated attacker can therefore learn the W3 Total Cache mfunc security key without any credentials or user interaction. On sites that also run W3 Total Cache with its mfunc dynamic-content feature active, knowledge of that key may allow an attacker to forge signed mfunc directives and inject arbitrary PHP code, but the confidentiality leak alone scores only 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) and escalation to code execution is strictly conditional on the co-presence and configuration of that second plugin. No public exploit code has been identified at time of analysis and there is no indication of confirmed active exploitation (no CISA KEV listing).
Sensitive information exposure in the WordPress plugin Lightweight Cookie Notice (daext) in all versions up to and including 1.19 leaks the W3TC_DYNAMIC_SECURITY constant, which the plugin hardcodes to a publicly known value; a remote, unauthenticated attacker can therefore learn the W3 Total Cache mfunc security key without any credentials or user interaction. On sites that also run W3 Total Cache with its mfunc dynamic-content feature active, knowledge of that key may allow an attacker to forge signed mfunc directives and inject arbitrary PHP code, but the confidentiality leak alone scores only 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) and escalation to code execution is strictly conditional on the co-presence and configuration of that second plugin. No public exploit code has been identified at time of analysis and there is no indication of confirmed active exploitation (no CISA KEV listing).