W3 Total Cache vulnerabilities
10 known vulnerabilities in W3 Total Cache from BoldGrid. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
W3 Total Cache: Improper Neutralization of Input During Web Page Generation
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.10.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated
- 7.2 High severity
W3 Total Cache: Improper Neutralization of Input During Web Page Generation
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to, and including, 2.10.6 due to insufficient input sanitization and output escaping. This makes it poss
- 7.2 High severity
W3 Total Cache: Improper Neutralization of Input During Web Page Generation
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escaping. This makes it poss
- 7.2 High severity
W3 Total Cache: Improper Neutralization of Input During Web Page Generation
The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated att
- 7.5 High severity
W3 Total Cache: Improper Limitation of a Pathname to a Restricted Directory
The W3 Total Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.4 via the setupSources function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server,
- 7.5 High severity
W3 Total Cache: Exposure of Sensitive Information to an Unauthorized Actor
The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3. This is due to the plugin bypassing its entire output buffering and processing pipeline when the request's User-Agent header contains "W3
- 9.0 Critical severity
W3 Total Cache: Improper Validation of Specified Quantity in Input
Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.
- 8.5 High severity
W3 Total Cache: Missing Authorization
The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subs
- 7.5 High severity
W3 Total Cache: Exposure of Sensitive Information to an Unauthorized Actor
The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive informatio
- 7.5 High severity
W3 Total Cache: Cleartext Storage of Sensitive Information
The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to