Skip to content
OpenAdvisories

Product · Bold Grid

W3 Total Cache

19 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.5
    CVE-2024-12365 Public exploit

    W3 Total Cache <= 2.8.1 - Authenticated (Subscriber+) Missing Authorization to Server-Side Request Forgery

    The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Sub…