Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-27384 EUVD-2026-9637GHSA-g2g2-5q7p-hmf2

WordPress W3 Total Cache plugin <= 2.9.1 - Arbitrary Code Execution vulnerability

Published Mar 5, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects W3 Total Cache: from n/a through <= 2.9.1.

Affected products

VendorProductAffectedFixed
BoldGrid W3 Total Cache ≤ 2.9.1 —

References