Boldgrid

W3 Total Cache

18 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2026-57623

  • EPSS 0.33%
  • Veröffentlicht 02.07.2026 11:15:25
  • Zuletzt bearbeitet 02.07.2026 15:17:09

Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.

4.7

CVE-2026-39595

  • EPSS 0.21%
  • Veröffentlicht 17.06.2026 09:50:53
  • Zuletzt bearbeitet 17.06.2026 09:50:53

Author Broken Access Control in W3 Total Cache <= 2.9.1 versions.

7.5

CVE-2026-5032

  • EPSS 0.96%
  • Veröffentlicht 02.04.2026 07:39:36
  • Zuletzt bearbeitet 27.04.2026 19:04:22

The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header co...

9

CVE-2026-27384

  • EPSS 0.3%
  • Veröffentlicht 05.03.2026 06:16:27
  • Zuletzt bearbeitet 22.04.2026 21:26:58

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.

8.5

CVE-2024-12365

  • EPSS 1.74%
  • Veröffentlicht 14.01.2025 07:15:26
  • Zuletzt bearbeitet 16.01.2025 21:31:22

The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers,...

7.5

CVE-2024-12008

  • EPSS 2.17%
  • Veröffentlicht 14.01.2025 07:15:25
  • Zuletzt bearbeitet 16.01.2025 21:30:41

The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive ...

5.3

CVE-2024-12006

  • EPSS 0.49%
  • Veröffentlicht 14.01.2025 07:15:25
  • Zuletzt bearbeitet 16.01.2025 21:30:14

The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to dea...

7.5

CVE-2023-5359

  • EPSS 0.81%
  • Veröffentlicht 25.09.2024 01:15:39
  • Zuletzt bearbeitet 30.09.2024 14:19:15

The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated att...

6.1

CVE-2021-24452

Exploit
  • EPSS 2%
  • Veröffentlicht 19.07.2021 11:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:06

The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting (XSS) issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabl...

6.1

CVE-2021-24436

Exploit
  • EPSS 1.91%
  • Veröffentlicht 19.07.2021 11:15:08
  • Zuletzt bearbeitet 21.11.2024 05:53:04

The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected Cross-Site Scripting (XSS) security vulnerability within the "extension" parameter in the Extensions dashboard, which is output in an attribute without being escaped first...