CVE-2024-4347: 
WordPress vulnerability analysis and mitigation

The WP Fastest Cache plugin for WordPress (CVE-2024-4347) contains a Directory Traversal vulnerability affecting all versions up to and including 1.2.6. The vulnerability was discovered and publicly disclosed on May 23, 2024 (NVD).

The vulnerability exists in the specificDeleteCache function of the WP Fastest Cache plugin. It has been assigned a CVSS v3.1 base score of 7.2 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (Wordfence).

When exploited, this vulnerability allows authenticated attackers to delete arbitrary files on the server. This includes critical files such as wp-config.php of the affected site or other sites in a shared hosting environment (NVD).

The vulnerability requires authentication with administrator or higher privileges to exploit. The attack can be executed remotely with low attack complexity and requires no user interaction (Wordfence).

Users should upgrade to a version newer than 1.2.6 when available. The vulnerability has been identified in the plugin's source code and can be reviewed at the specified location (WordPress Plugin).