CVE-2021-20714: 
WordPress vulnerability analysis and mitigation

A directory traversal vulnerability was discovered in WP Fastest Cache WordPress plugin versions prior to 0.9.1.7. The vulnerability, identified as CVE-2021-20714, was discovered by Gen Sato of Mitsui Bussan Secure Directions, Inc. and disclosed on April 27, 2021. The vulnerability affects the WP Fastest Cache plugin, which is a popular WordPress caching solution used by over 1.5 million websites (WP Plugin).

The vulnerability is classified as a directory traversal issue (CWE-22) that allows path traversal attacks. It received a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H, indicating network accessibility with low attack complexity, but requiring high privileges (NVD).

When exploited, the vulnerability allows an authenticated attacker with administrator privileges to delete arbitrary files on the server through unspecified vectors. This could potentially lead to service disruption and data loss (JVN).

The vulnerability has been patched in WP Fastest Cache version 0.9.1.7. Website administrators are advised to update to this version or later to mitigate the risk. No alternative workarounds have been published (JVN).