TNC Toolbox Web Performance Plugin Vulnerability

The TNC Toolbox: Web Performance plugin for WordPress is a popular plugin used to enhance web performance. However, it stores sensitive cPanel API credentials in files within the web-accessible wp-content directory without adequate protection, making them vulnerable to exposure and exploitation.

Specific version info not stated in the advisory.

1. Contact The Network Crew directly for a patched version - there's no public patch link in the advisory.
2. Immediate mitigations:
3. Restrict network access to your TNC Toolbox: Web Performance instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• github.com
• www.wordfence.com