W3 Total Cache vulnerabilities
We track 1 vulnerability in W3 Total Cache products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest W3 Total Cache vulnerabilities
- 10.0 Critical severity
W3 Total Cache: Improper Limitation of a Pathname to a Restricted Directory
The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing directory on the server, inside or outside the web root, overw