What’s Vulnerable › Products

W3 Total Cache vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your W3 Total Cache version is affected

Latest W3 Total Cache vulnerabilities

• CVE-2026-107321 — W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import (CVSS 5.4)
• CVE-2026-18051 — W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key (CVSS 10.0)
• CVE-2025-9501 — W3 Total Cache < 2.8.13 - Unauthenticated Command Injection (CVSS 9.0)