Security
فارسی
All products

w3-total-cache

WordPress · Plugin
41 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify PlaceholderCVE-2026-120019 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License ExpiryCVE-2026-111254 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-114178 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.10.5 - Authenticated (Author+) Path TraversalCVE-2026-107321 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-87920 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background MutatorCVE-2026-78438 w3-total-cache WordPress High Fix reported
W3 Total Cache < 2.10.5 - Unauthenticated Path TraversalCVE-2026-18051 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameCVE-2026-18109 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.10.2 - Unauthenticated Path TraversalCVE-2026-66695 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' ParameterCVE-2026-9282 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.9.1 - Missing AuthorizationCVE-2026-39595 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary Code ExecutionCVE-2026-57623 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent HeaderCVE-2026-5032 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.9.1 - Unauthenticated Arbitrary Code ExecutionCVE-2026-27384 w3-total-cache WordPress Critical Fix reported
W3 Total Cache <= 2.8.12 - Unauthenticated Command InjectionCVE-2025-9501 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.8.1 Information Exposure via Log FilesCVE-2024-12008 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/DeactivationCVE-2024-12006 w3-total-cache WordPress Medium Fix reported
W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request ForgeryCVE-2024-12365 w3-total-cache WordPress High Fix reported
W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in PlaintextCVE-2023-5359 w3-total-cache WordPress Low Fix reported
CURLOPT_HTTPAUTH option not cleared on change of originCVE-2022-31090 · GHSA-25MQ-V84Q-4J7RVersion ranges need review. guzzlehttp/guzzlew3-total-cache ComposerWordPress High Fix reported