BoldGrid W3 Total Cache vulnerabilities

CVEs per yearBy the year they were published

1. 20213
2. 20241
3. 20253
4. 202611

Newest CVEs

• CVE-2026-120019

  W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder

  boldgrid · W3 Total Cache

  Medium5.4
• CVE-2026-111254

  W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-87920

  W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-78438

  W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-18109

  W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name

  boldgrid · W3 Total Cache

  High7.2
• CVE-2026-66695

  WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability

  BoldGrid · W3 Total Cache

  Medium6.5
• CVE-2026-9282

  W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter

  boldgrid · W3 Total Cache

  High7.5
• CVE-2026-57623

  WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability

  BoldGrid · W3 Total Cache

  Critical9.0
• CVE-2026-39595

  WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability

  BoldGrid · W3 Total Cache

  Medium4.7
• CVE-2026-5032

  W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header

  boldgrid · W3 Total Cache

  High7.5