Advisories · Technology

W3 Total Cache.

Every CVE that names W3 Total Cache among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107321 CVE record

CVSS 5.4 Medium

W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import
- W3 Total Cache
- Path traversal
Not analysed yet 10 Oct 2026
CVE-2026-18051 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key
- W3 Total Cache
- Path traversal
Not analysed yet 19 Aug 2026
CVE-2025-9501 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection
- W3 Total Cache
Not analysed yet 17 Nov 2025
CVE-2012-6079 CVE record

W3 Total Cache: W3 Total Cache before 0.9.2.5 exposes sensitive cached database information which allows…
- W3 Total Cache
Not analysed yet 22 Nov 2019
CVE-2012-6078 CVE record

W3 Total Cache: W3 Total Cache before 0.9.2.5 generates hash keys insecurely which allows remote…
- W3 Total Cache
Not analysed yet 22 Nov 2019
CVE-2012-6077 CVE record

W3 Total Cache: W3 Total Cache before 0.9.2.5 allows remote attackers to retrieve password hash…
- W3 Total Cache
Not analysed yet 22 Nov 2019