W3 Total Cache Plugin vulnerable to Sensitive Information Exposure

CVE-2023-5359

Summary

The W3 Total Cache plugin for WordPress has a vulnerability that exposes sensitive information, specifically Google OAuth API secrets, stored in plaintext within the publicly accessible plugin source code. This flaw allows unauthenticated attackers the potential to impersonate the plugin, which may lead to unauthorized access to user account information under certain conditions. While this vulnerability does not impact users' WordPress sites directly, it raises significant security concerns regarding data privacy.

References