Known vulnerabilities in the W3 Total Cache plugin
15 security advisories have been published for the W3 Total Cache plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- W3 Total Cache - Security Vulnerability (CVE-2026-78438) HIGH
- W3 Total Cache - Security Vulnerability (CVE-2026-18051) CRITICAL
- W3 Total Cache - Cross-Site Scripting (XSS) (CVE-2026-18109) HIGH
- W3 Total Cache - Path Traversal (CVE-2026-66695) MEDIUM
- W3 Total Cache - Path Traversal (CVE-2026-9282) HIGH
- W3 Total Cache - Broken Access Control (CVE-2026-39595) MEDIUM
- W3 Total Cache - Remote Code Execution (CVE-2026-5032) HIGH
- W3 Total Cache - Security Vulnerability (CVE-2025-9501) CRITICAL
- W3 Total Cache - Information Disclosure (CVE-2024-12365) HIGH
- W3 Total Cache - Cross-Site Request Forgery (CSRF) (CVE-2024-12008) MEDIUM
- W3 Total Cache - Broken Access Control (CVE-2024-12006) MEDIUM
- W3 Total Cache - Information Disclosure (CVE-2023-5359) LOW
- W3 Total Cache - Cross-Site Scripting (XSS) (CVE-2021-24452) MEDIUM
- W3 Total Cache - Cross-Site Scripting (XSS) (CVE-2021-24436) MEDIUM
- W3 Total Cache - Cross-Site Scripting (XSS) (CVE-2021-24427) MEDIUM