Skip to main content

Speedycache Cache Optimization Performance

1 CVEs product

Monthly

CVE-2026-5114 Jul 28, 18:35 MEDIUM This Month

Arbitrary file read in the SpeedyCache plugin for WordPress allows authenticated administrators to read sensitive files like wp-config.php by exploiting a path traversal vulnerability in CSS URL validation. The flaw affects all versions up to 1.3.8 and requires Administrator-level access; no public exploit or active exploitation has been reported at this time.

PHP WordPress Path Traversal Wordpress Plugin Softaculous +1
NVD
CVSS 3.1
4.9
EPSS
0.3%
EPSS 0% CVSS 4.9
MEDIUM This Month

Arbitrary file read in the SpeedyCache plugin for WordPress allows authenticated administrators to read sensitive files like wp-config.php by exploiting a path traversal vulnerability in CSS URL validation. The flaw affects all versions up to 1.3.8 and requires Administrator-level access; no public exploit or active exploitation has been reported at this time.

PHP WordPress Path Traversal +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy