Threats tagged 'ghsa-c769-pvxm-w832'

The Seraphinite Accelerator WordPress plugin versions up to and including 2.29.24 contain a vulnerability that allows unauthenticated attackers to access sensitive user information. This occurs through predictable gzip-serialized cache files when the plugin's Object Cache feature is enabled. Attackers can extract user data such as usernames, emails, hashed passwords, and activation keys by triggering caching of the target user record and then retrieving the cache file.