Check Point Advisories

W3-Total-Cache Wordpress-plugin Username and Hash Extract (CVE-2012-6077)

Check Point Reference: CPAI-2013-3508
Date Published: 26 Nov 2013
Severity: Medium
Last Updated: Sunday 24 May, 2026
Source: CVE-2012-6077
Protection Provided by:

Security Gateway
R75
Who is Vulnerable? W3 Total Cache Plugin for Wordpress
Vulnerability Description An information disclosure vulnerability has been reported in W3 Total Cache Plugin for Wordpress.
Vulnerability DetailsThe vulnerability is due to the storage location of the database cache files. A remote attacker could trigger this flaw by sending a direct request for a cache file. Successful exploitation may result in the disclosure of sensitive password hash information.

Protection Overview

This protection will detect and block attempts to exploit this vulnerability.

Security Gateway R75 / R71 / R70

  1. In the IPS tab, click Protections and find the W3-Total-Cache Wordpress-plugin Username and Hash Extract protection using the Search tool and Edit the protection's settings.
  2. Install policy on all modules.

SmartView Tracker will log the following entries:
Attack Name: DNS Enforcement Violation
Attack Information: W3-Total-Cache Wordpress-plugin Username and Hash Extract

×
  Feedback
This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
OK