Posté par: igor51 le décembre 30, 2012, 11:01:25
An apparent misconfiguration exists in W3 Total Cache (W3TC), a popular plugin for the WordPress blogging platform, that could allow an attacker to browse and download password hashes and other database information. W3 Total Cache (W3TC) is a framework for Wordpress that helps speed up blogs by caching content.
Source: WordPress W3 Total Cache Misconfiguration Leaves Some Blogs Vulnerable (http://threatpost.com/en_us/blogs/misconfiguration-flaw-wordpress-leaves-some-blogs-vulnerable-122712)