What’s Vulnerable › Products
boldgrid W3 Total Cache vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Check whether your boldgrid W3 Total Cache version is affected
Latest boldgrid W3 Total Cache vulnerabilities
- CVE-2026-87920 — W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content (CVSS 7.2)
- CVE-2026-78438 — W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator (CVSS 7.2)
- CVE-2026-18109 — W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name (CVSS 7.2)
- CVE-2026-66695 — WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability (CVSS 6.5)
- CVE-2026-9282 — W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter (CVSS 7.5)
- CVE-2026-57623 — WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability (CVSS 9.0)
- CVE-2026-39595 — WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability (CVSS 4.7)
- CVE-2026-5032 — W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header (CVSS 7.5)
- CVE-2026-27384 — WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability (CVSS 9.0)
- CVE-2024-12365 — W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery (CVSS 8.5)
- CVE-2024-12008 — W3 Total Cache <= 2.8.1 Information Exposure via Log Files (CVSS 7.5)
- CVE-2024-12006 — W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation (CVSS 5.3)
- CVE-2023-5359 — W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext (CVSS 7.5)
- CVE-2021-24452 — W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context) (CVSS 6.1)
- CVE-2021-24436 — W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context) (CVSS 6.1)
- CVE-2021-24427 — W3 Total Cache < 2.1.3 - Authenticated Stored XSS (CVSS 4.8)
- CVE-2013-2010 — (CVSS 9.8)
- CVE-2012-6079 — (CVSS 7.5)
- CVE-2012-6078 — (CVSS 7.5)
- CVE-2012-6077 — (CVSS 7.5)
- CVE-2019-6715 — (CVSS 7.5)
- CVE-2014-9414 — (CVSS 6.8)
- CVE-2014-8724 — (CVSS 4.3)