BoldGrid W3 Total Cache

• CVE-2026-120019 Medium 5.4 W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Predictable Minify Placeholder 0.2%
• CVE-2026-111254 High 7.2 W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cross-Site Scripting via Comment Content Cached as HTML after License Expiry 0.3%
• CVE-2026-87920 High 7.2 W3 Total Cache <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content 0.2%
• CVE-2026-78438 High 7.2 W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator 0.5%
• CVE-2026-18109 High 7.2 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name 0.4%
• CVE-2026-66695 Medium 6.5 WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability 0.4%
• CVE-2026-9282 High 7.5 W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read via 'f_array[]' Parameter 2.9%
• CVE-2026-57623 Critical 9.0 WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability 0.5%
• CVE-2026-39595 Medium 4.7 WordPress W3 Total Cache plugin <= 2.9.1 - Broken Access Control vulnerability 0.2%
• CVE-2026-5032 High 7.5 W3 Total Cache <= 2.9.3 - Unauthenticated Security Token Exposure via User-Agent Header 3.2%
• CVE-2026-27384 Critical 9.0 WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability 0.4%
• CVE-2024-12008 Medium 5.3 W3 Total Cache <= 2.8.1 Information Exposure via Log Files 2.4%
• CVE-2024-12006 Medium 5.3 W3 Total Cache <= 2.8.1 Missing Authorization to Unauthenticated Plugin Deactivation and Extensions Activation/Deactivation 0.5%
• CVE-2024-12365 High 8.5 W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery 1.8%
• CVE-2023-5359 Low 3.7 W3 Total Cache <= 2.7.5 - Sensitive Credentials Stored in Plaintext 0.8%
• CVE-2021-24452 Unrated W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context) 1.9%
• CVE-2021-24436 Unrated W3 Total Cache < 2.1.4 - Reflected XSS in Extensions Page (Attribute Context) 1.8%
• CVE-2021-24427 Unrated W3 Total Cache < 2.1.3 - Authenticated Stored XSS 0.6%