Skip to contentBoldgrid W3 Total Cache vulnerabilities
- boldgrid w3 total cacheW3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify PlaceholderCVE-2026-120019Public exploit5.4 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License ExpiryCVE-2026-1112547.2 High
- bold grid w3 total cacheWordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1141787.1 High
- boldgrid w3 total cacheW3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library ImportCVE-2026-1073215.4 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment ContentCVE-2026-879207.2 High
- boldgrid w3 total cacheW3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background MutatorCVE-2026-784387.2 High
- boldgrid w3 total cacheW3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache KeyCVE-2026-1805110.0 Critical
- boldgrid w3 total cacheW3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameCVE-2026-181097.2 High
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerabilityCVE-2026-666956.5 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' ParameterCVE-2026-92827.5 High
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerabilityCVE-2026-576239.0 Critical
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerabilityCVE-2026-395954.7 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent HeaderCVE-2026-50327.5 High
- boldgrid w3 total cacheWordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerabilityCVE-2026-273849.0 Critical
- boldgrid w3 total cacheW3 Total Cache < 2.8.13 - Unauthenticated Command InjectionCVE-2025-9501Public exploitEPSS 22.1%9.0 Critical
- boldgrid w3 total cacheW3 Total Cache <= 2.8.1 Information Exposure via Log FilesCVE-2024-12008Public exploit5.3 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request ForgeryCVE-2024-12365Public exploit8.5 High
- boldgrid w3 total cacheW3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/DeactivationCVE-2024-120065.3 Medium
- boldgrid w3 total cacheW3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in PlaintextCVE-2023-5359Public exploit3.7 Low
- boldgrid w3 total cacheW3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)CVE-2021-244526.1 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context)CVE-2021-244366.1 Medium
- boldgrid w3 total cacheW3 Total Cache < 2.1.3 - Authenticated Stored XSSCVE-2021-244274.8 Medium