Description
Unauthenticated Arbitrary Code Execution in W3 Total Cache <= 2.9.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldGrid | W3 Total Cache | ≤ 2.9.4 | — |
Critical · 9.0
CVE-2026-57623
EUVD-2026-41365GHSA-m2v8-v989-39q2
WordPress W3 Total Cache plugin <= 2.9.4 - Arbitrary Code Execution vulnerability
Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack