W3 Total Cache

Уязвимости

• CVE-2026-57623

  WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability

  Критич. 9.0

• CVE-2026-27384

  WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

  Критич. 9.0

• CVE-2024-12365

  W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery

  Высокий 8.5

• CVE-2026-9282

  W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter

  Высокий 7.5

• CVE-2026-5032

  W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

  Высокий 7.5

• CVE-2024-12008

  W3 Total Cache <= 2.8.1 Information Exposure via Log Files

  Высокий 7.5

• CVE-2023-5359

  W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext

  Высокий 7.5

• CVE-2026-78438

  W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator

  Высокий 7.2

• CVE-2026-18109

  W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

  Высокий 7.2

• CVE-2014-9414

  The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross

  Средний 6.8

• CVE-2026-66695

  WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability

  Средний 6.5

• CVE-2024-12006

  W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation

  Средний 5.3

• CVE-2026-39595

  WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability

  Средний 4.7

• CVE-2014-8724

  Cross-site scripting (XSS) vulnerability in the W3 Total Cache plugin before 0.9.4.1 for WordPress, when debug mode is enabled, allows remot

  Средний 4.3