CVE-2017-11658

Published: Jul 26, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) -- however, this is insufficient to stop remote attacks and can be bypassed by using 0x00 bytes, as demonstrated by a .%00.../.%00.../ attack.

Affected (110)

Products: Wp Rocket: Wp Rocket

Wp Rocket

1 product

Wp Rocket

Configuration A

110 vulnerable

Vulnerable Software	Affected Versions
Wp Rocket Wp Rocket	Version 1.3.0
Wp Rocket Wp Rocket	Version 1.3.1
Wp Rocket Wp Rocket	Version 1.3.2
Wp Rocket Wp Rocket	Version 1.3.3
Wp Rocket Wp Rocket	Version 1.3.4
Wp Rocket Wp Rocket	Version 1.3.5
Wp Rocket Wp Rocket	Version 1.3.6
Wp Rocket Wp Rocket	Version 1.3.7
Wp Rocket Wp Rocket	Version 2.0.0
Wp Rocket Wp Rocket	Version 2.0.1
Wp Rocket Wp Rocket	Version 2.0.2
Wp Rocket Wp Rocket	Version 2.0.3
Wp Rocket Wp Rocket	Version 2.0.4
Wp Rocket Wp Rocket	Version 2.0.5
Wp Rocket Wp Rocket	Version 2.1.0
Wp Rocket Wp Rocket	Version 2.1.1
Wp Rocket Wp Rocket	Version 2.10.0
Wp Rocket Wp Rocket	Version 2.10.1
Wp Rocket Wp Rocket	Version 2.10.2
Wp Rocket Wp Rocket	Version 2.10.3
Wp Rocket Wp Rocket	Version 2.2.0
Wp Rocket Wp Rocket	Version 2.2.1
Wp Rocket Wp Rocket	Version 2.2.2
Wp Rocket Wp Rocket	Version 2.2.3
Wp Rocket Wp Rocket	Version 2.3.0
Wp Rocket Wp Rocket	Version 2.3.10
Wp Rocket Wp Rocket	Version 2.3.11
Wp Rocket Wp Rocket	Version 2.3.1
Wp Rocket Wp Rocket	Version 2.3.2
Wp Rocket Wp Rocket	Version 2.3.3
Wp Rocket Wp Rocket	Version 2.3.4
Wp Rocket Wp Rocket	Version 2.3.5
Wp Rocket Wp Rocket	Version 2.3.6
Wp Rocket Wp Rocket	Version 2.3.7
Wp Rocket Wp Rocket	Version 2.3.8
Wp Rocket Wp Rocket	Version 2.3.9
Wp Rocket Wp Rocket	Version 2.4.0
Wp Rocket Wp Rocket	Version 2.4.1
Wp Rocket Wp Rocket	Version 2.4.2
Wp Rocket Wp Rocket	Version 2.5.0
Wp Rocket Wp Rocket	Version 2.5.10
Wp Rocket Wp Rocket	Version 2.5.11
Wp Rocket Wp Rocket	Version 2.5.12
Wp Rocket Wp Rocket	Version 2.5.1
Wp Rocket Wp Rocket	Version 2.5.2
Wp Rocket Wp Rocket	Version 2.5.3
Wp Rocket Wp Rocket	Version 2.5.4
Wp Rocket Wp Rocket	Version 2.5.5
Wp Rocket Wp Rocket	Version 2.5.6
Wp Rocket Wp Rocket	Version 2.5.7
Wp Rocket Wp Rocket	Version 2.5.8
Wp Rocket Wp Rocket	Version 2.5.9
Wp Rocket Wp Rocket	Version 2.6.0
Wp Rocket Wp Rocket	Version 2.6.1.1
Wp Rocket Wp Rocket	Version 2.6.10
Wp Rocket Wp Rocket	Version 2.6.11
Wp Rocket Wp Rocket	Version 2.6.12
Wp Rocket Wp Rocket	Version 2.6.13
Wp Rocket Wp Rocket	Version 2.6.14
Wp Rocket Wp Rocket	Version 2.6.15
Wp Rocket Wp Rocket	Version 2.6.16
Wp Rocket Wp Rocket	Version 2.6.2
Wp Rocket Wp Rocket	Version 2.6.3
Wp Rocket Wp Rocket	Version 2.6.4
Wp Rocket Wp Rocket	Version 2.6.5
Wp Rocket Wp Rocket	Version 2.6.6
Wp Rocket Wp Rocket	Version 2.6.7
Wp Rocket Wp Rocket	Version 2.6.8
Wp Rocket Wp Rocket	Version 2.6.9
Wp Rocket Wp Rocket	Version 2.7.0
Wp Rocket Wp Rocket	Version 2.7.1
Wp Rocket Wp Rocket	Version 2.7.2
Wp Rocket Wp Rocket	Version 2.7.3
Wp Rocket Wp Rocket	Version 2.7.4
Wp Rocket Wp Rocket	Version 2.8.0
Wp Rocket Wp Rocket	Version 2.8.10
Wp Rocket Wp Rocket	Version 2.8.11
Wp Rocket Wp Rocket	Version 2.8.12
Wp Rocket Wp Rocket	Version 2.8.13
Wp Rocket Wp Rocket	Version 2.8.14
Wp Rocket Wp Rocket	Version 2.8.15
Wp Rocket Wp Rocket	Version 2.8.16
Wp Rocket Wp Rocket	Version 2.8.17
Wp Rocket Wp Rocket	Version 2.8.18
Wp Rocket Wp Rocket	Version 2.8.19
Wp Rocket Wp Rocket	Version 2.8.1
Wp Rocket Wp Rocket	Version 2.8.20
Wp Rocket Wp Rocket	Version 2.8.21
Wp Rocket Wp Rocket	Version 2.8.23
Wp Rocket Wp Rocket	Version 2.8.2
Wp Rocket Wp Rocket	Version 2.8.3
Wp Rocket Wp Rocket	Version 2.8.4
Wp Rocket Wp Rocket	Version 2.8.5
Wp Rocket Wp Rocket	Version 2.8.6
Wp Rocket Wp Rocket	Version 2.8.7
Wp Rocket Wp Rocket	Version 2.8.8
Wp Rocket Wp Rocket	Version 2.8.9
Wp Rocket Wp Rocket	Version 2.9.0
Wp Rocket Wp Rocket	Version 2.9.10
Wp Rocket Wp Rocket	Version 2.9.11
Wp Rocket Wp Rocket	Version 2.9.1
Wp Rocket Wp Rocket	Version 2.9.2
Wp Rocket Wp Rocket	Version 2.9.3
Wp Rocket Wp Rocket	Version 2.9.4
Wp Rocket Wp Rocket	Version 2.9.5
Wp Rocket Wp Rocket	Version 2.9.6
Wp Rocket Wp Rocket	Version 2.9.7
Wp Rocket Wp Rocket	Version 2.9.8.1
Wp Rocket Wp Rocket	Version 2.9.8
Wp Rocket Wp Rocket	Version 2.9.9