Description
WordPress是一套使用PHP语言开发的博客平台。W3 Total Cache plugin是使用在其中的一个SEO（搜索引擎优化）插件。WordPress W3 Total Cache插件0.9.4之前版本，pub/sns.php文件存在任意文件读取漏洞，可使远程攻击者通过SubscribeURL字段，读取任意文件。
WordPress W3 Total Cache pub/sns.php 文件读取漏洞（CVE-2019-6715）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2019-6715
https://github.com/random-robbie/cve-2019-6715
https://www.cvedetails.com/cve/CVE-2019-6715/
https://www.exploit-db.com/exploits/49317
https://wpscan.com/vulnerability/692eac9d-2b17-4b18-94fe-b0d353bdacd6/
https://blog.csdn.net/weixin_42323041/article/details/115011873
https://www.nsfocus.net/vulndb/43096
https://avd.aliyun.com/detail?id=AVD-2019-6715
http://packetstormsecurity.com/files/160674/WordPress-W3-Total-Cache-0.9.3-File-Read-Directory-Traversal.html
https://vinhjaxt.github.io/2019/03/cve-2019-6715
https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-w3-total-cache-arbitrary-file-disclosure-0-9-3/